xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5c000000]}}) 12:36:51 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xd]}}) [ 928.154255][ T26] audit: type=1804 audit(1571315811.671:501): pid=22394 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1416/file0/file0" dev="sda1" ino=17482 res=1 12:36:51 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x94110000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) clone3(&(0x7f0000001380)={0x30840000, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000200)=0x0, 0x1000002f, 0x0, &(0x7f0000001c40)=""/4096, 0xffffffffffffff23, &(0x7f0000001240)=""/228}, 0x40) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x70}], 0xfd, 0x0) tgkill(r1, r4, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:51 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x5c, "9ad1f84ca5291729d9574086277e112c3842860e1dbdb1b49543f7ad6ef63867d7cb9ea3afa4d8ea82cf88a766fea8a669970242701006072fd3313be2d11fbf3c268c65e7ee2b546a874bfc48282475b691e48ea8d652e566983cec"}, &(0x7f0000000000)=0x64) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r4}, 0x8) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000140)) 12:36:51 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xe]}}) 12:36:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xf0ffffff) [ 928.362991][T22407] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 928.476331][T22407] FAT-fs (loop2): Filesystem has been set read-only 12:36:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xfcffffff) 12:36:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {0x3}}}) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000340)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f00000000c0)=0x80) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x2, 0xce) 12:36:52 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x4a000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x10]}}) 12:36:52 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x95000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xff0b0000) [ 928.609109][ T26] audit: type=1804 audit(1571315812.131:502): pid=22432 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1417/file0/file0" dev="sda1" ino=17480 res=1 12:36:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000200)={0x1000, 0x5, 0xf, "e00fe300493c8dc5909d85f4afe609f24163b6357ac99ae318f6639554433debc27087fe7db4f47a7c2d3c12c94ac7699dcece691be9e3c64408ed7a", 0x7, "e54a4a0d00e591f6981070b963af266ec2f24662314aa913543697c2a0b5dbc7c0d6ff29634a9c57e0abc8ebe75e15a63da04b50f2276f7940f40a87", 0xec}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x11]}}) 12:36:52 executing program 0: sysfs$1(0x1, &(0x7f0000000000)='/dev/vbi#\x00') r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:36:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xffffff7f) 12:36:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0xde}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x12]}}) [ 928.997122][ T26] audit: type=1804 audit(1571315812.521:503): pid=22466 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1011/file0/file0" dev="sda1" ino=17475 res=1 [ 929.065702][T22486] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:36:52 executing program 0: ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @rand_addr=0x400}, {0x2, 0x4e24, @rand_addr=0x8}, {0x2, 0x4e24, @local}, 0x142, 0x0, 0x0, 0x0, 0x35db, &(0x7f0000000000)='veth0_to_bridge\x00', 0x1000, 0x80000001, 0xfa69}) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:36:52 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x4b000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xffffff9e) [ 929.106415][T22492] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:36:52 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x9c080000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x25]}}) 12:36:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000a}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x174, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xacf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x41ca8b9b}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x27}}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe1a}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x62}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}]}, 0x174}}, 0x80) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x2a0, r4, 0x652, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x110, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0xbb}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf15a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa00}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf98}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x10}, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe00}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x104, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1f, @loopback, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x20000, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x2, 0x0}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @ipv4={[], [], @empty}, 0x582}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x46}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a12}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x1, @output={0x1000, 0x0, {0x20000}, 0x6}}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x2800) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e22, 0x6456, @ipv4={[], [], @local}, 0x7}}, 0x0, 0x7ff, 0xa5, 0x80, 0x7f}, &(0x7f0000000140)=0x98) 12:36:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xffffffef) 12:36:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x5c]}}) [ 929.423791][T22519] net_ratelimit: 74 callbacks suppressed [ 929.423796][T22519] netlink: zone id is out of range 12:36:53 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x4e050000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xfffffff0) [ 929.524160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 929.530015][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:53 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x300]}}) 12:36:53 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000240)={0x9c0000, 0x200, 0xfffffffd, [], &(0x7f0000000200)={0xa00905, 0x333, [], @string=&(0x7f0000000140)=0x4}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:53 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x9c180000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) [ 929.685479][T22548] netlink: zone id is out of range [ 929.693012][T22548] netlink: zone id is out of range [ 929.701704][T22548] netlink: zone id is out of range 12:36:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xfffffffc) [ 929.794272][T22561] netlink: zone id is out of range [ 929.821897][T22561] netlink: zone id is out of range 12:36:53 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x500]}}) [ 929.878889][T22561] netlink: zone id is out of range 12:36:53 executing program 0: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = geteuid() fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x80, 0xc0}, {0x6ca, 0x80000001}], r1}, 0x18, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) recvmmsg(r4, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000140)=""/73, 0x49}, {&(0x7f0000000480)=""/187, 0xbb}], 0x4, &(0x7f0000000580)=""/58, 0x3a}, 0x7}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/55, 0x37}], 0x1}, 0x6d}, {{&(0x7f0000000640)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/216, 0xd8}, {&(0x7f00000007c0)=""/103, 0x1a}], 0x2, &(0x7f0000000880)=""/38, 0x26}, 0x6}, {{&(0x7f00000008c0)=@l2, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000940)=""/247, 0xf7}, {&(0x7f0000000a40)=""/222, 0xde}, {&(0x7f0000000b40)=""/205, 0xcd}, {&(0x7f0000000c40)=""/85, 0x55}], 0x4, &(0x7f0000000d00)=""/81, 0x51}, 0x9}, {{&(0x7f0000000d80)=@alg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/2, 0x1}, {&(0x7f0000000e40)=""/184, 0xb8}, {&(0x7f0000000f00)=""/213, 0xd5}], 0x3, &(0x7f0000001040)=""/58, 0x3a}, 0x7ff}], 0x5, 0xcfa0e69ee6e14e81, &(0x7f00000011c0)={0x0, 0x989680}) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:36:53 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x40, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x4040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0x10228) setuid(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000000000000cdaf301367010000000000000000fbb6"], 0x14}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x3000000000000) 12:36:53 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x56080000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 930.004179][ C0] protocol 88fb is buggy, dev hsr_slave_0 12:36:53 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x9e070000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:53 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x600]}}) 12:36:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x40030000000000) 12:36:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000100)={0x31, 0x3, 0x0, {0x5, 0x10, 0x0, '$vboxnet1ppp1$;{'}}, 0x31) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000080)={0x2, 0x5, @raw_data=[0x9, 0x4, 0x23f40, 0x8, 0x401, 0xffff, 0x7, 0x80000001, 0x5, 0x6, 0xf8, 0x80000, 0x0, 0x4, 0x6, 0x2]}) 12:36:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x100000000000000) 12:36:53 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x700]}}) 12:36:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x6, @output={0x2000, 0x0, {0x0, 0x9}, 0xfffffffb, 0x20}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r2, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x4, 0x5}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0xf, 0x9, 0xa0}, &(0x7f0000000100)=0x7fffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xa0}}, 0x10) 12:36:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x200000000000000) 12:36:54 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x5e0b0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:54 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x900]}}) 12:36:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r2, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0xf00, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x44008082) 12:36:54 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xa60e0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:54 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x101000) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x5, 0x3, @stop_pts=0x7}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x334080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x20000800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000014) 12:36:54 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xa00]}}) 12:36:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x300000000000000) 12:36:54 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@initdev, @remote}, &(0x7f0000000080)=0x8) 12:36:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x400000000000000) 12:36:54 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xb00]}}) 12:36:54 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x60000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:54 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xae050000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:54 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x20, 0x100, 0x20, 0x0, 0x9d9c, 0x6}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {}, 0x0, 0x2}}) 12:36:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xa00000000000000) 12:36:54 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xc00]}}) 12:36:54 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) socket$packet(0x11, 0x1, 0x300) 12:36:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xf00000000000000) 12:36:54 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xd00]}}) [ 931.361629][T22678] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 931.385664][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 931.385673][ T26] audit: type=1804 audit(1571315814.911:510): pid=22682 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1016/file0/file0" dev="sda1" ino=17434 res=1 12:36:54 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x660e0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 931.436947][T22678] FAT-fs (loop3): Filesystem has been set read-only 12:36:55 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xe00]}}) 12:36:55 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xae150000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x4000000000000000) 12:36:55 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f00000002c0)={r6, 0x22}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r1, 0x10001}}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$IOC_PR_RELEASE(r8, 0x401070ca, &(0x7f0000000140)={0x9fd, 0x8000}) r9 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) socket$l2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:36:55 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x1100]}}) 12:36:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x6000000000000000) 12:36:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x8000000000000000) 12:36:55 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x1200]}}) [ 931.957347][ T26] audit: type=1804 audit(1571315815.481:511): pid=22724 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1017/file0/file0" dev="sda1" ino=17492 res=1 12:36:55 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x69030000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:55 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xb0040000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:55 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x2500]}}) 12:36:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x9effffff00000000) 12:36:55 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x4000]}}) 12:36:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xefffffff00000000) [ 932.369797][ T26] audit: type=1804 audit(1571315815.891:512): pid=22765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1018/file0" dev="sda1" ino=17456 res=1 12:36:56 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x6e010000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x5c00]}}) [ 932.518609][ T26] audit: type=1804 audit(1571315816.001:513): pid=22766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1425/file0/file0" dev="sda1" ino=17453 res=1 12:36:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x1000000]}}) 12:36:56 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xb60c0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xf0ffffff00000000) [ 932.613663][T22771] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 932.628107][T22771] FAT-fs (loop2): Filesystem has been set read-only 12:36:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x2000000]}}) 12:36:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xfcffffff00000000) 12:36:56 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x71060000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xff0b000000000000) [ 932.984600][ T26] audit: type=1804 audit(1571315816.511:514): pid=22789 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1426/file0/file0" dev="sda1" ino=17491 res=1 12:36:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x3000000]}}) 12:36:56 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xb61c0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xffffff7f00000000) 12:36:56 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x4000000]}}) [ 933.229957][ T26] audit: type=1804 audit(1571315816.741:515): pid=22821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1020/file0/file0" dev="sda1" ino=17491 res=1 12:36:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000000000000000000000000000000000000dd938d7bf0114e62f0f280f3310239305522e438b2e40002eb06d1c4637094b442658434a17289a003bc36c350fced46f56371a38828f12997677ef4418eaf300a975d8721df4857aede9c27ca8ae782f1a69a3f3daa1f89709db8adcc08d710f61f50eabdc20837d6bf74d1e618"], 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="94000000000180ff00007c0001000004000000000000000000000000000100"/44], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xb, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x3c) fsetxattr$security_evm(r2, &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=@md5={0x1, "ea0612323d00f921638d596c32be4020"}, 0x11, 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r5 = dup(r4) io_setup(0x7, &(0x7f00000001c0)) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20184450}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x246}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB="25d336cf0628d61952eaae7a8e5fb911182f9a94705d1c5ea7a8fd5d4aea87331f999a08c78903fdd1db74", @ANYRES32=r7, @ANYBLOB="989c8303fac9cb5ee54945154285eea5fdedee288deaf8837e1cd62b0f89ce71c43b2d9cdf38294ccdb9fa3a0b0602a5fd463d9b64f67dd3c44b2c93e80d8cc8453eff6e1a2e103e20370022234803a8c9b20657706036215f0190a38e18aec59285167b6a8de2d1ae06a2f8d8b700f124b90961e748c76ca1f3b0ce1f33d5a5c8a3faeeb83006f718085c130937de2902977db0275c95c4094d31c5d95fbcb5f9dcf0db9ec613396b0f78b74334917e2bec4ebab38c091de792d78812ec72f31fa7112a7907599d2dd0cf3223fb57807a8b86f7c4148d4719e92f89e980a14c669a91414f65220419ab05902fd57710eeae503ea61eb9df36dd1a40b4de3333c5e76f7b8d2e685c0354780b8fbe51f7d546fd59eeb1207eef811999fa2feebeb824ba8957970f30dc4e4e6fcc912b8bcd536a0788d83b518771234742f8a0718752a11821f491ad530d292b32909cdd6477822a294611e4344a0507d1766d6afe56e73e9721605c3d8828fa817a314a8efd4e99c6334f6777b4c81dadf36019b2a3631bc56b1275fc7fe07eb633322d9acbd99dfaba8bdc417edabb3815369be8ca7b51e4d9127110cf52e80eeb91d21bfa4925aa5d5e6ad56264cacf07ce63ef37df6eed57717fe8429107e06901c5b3d36a008125ffb28e7f25b6d03f17069d9c83df477a3517be890ecef1ad74429de4aa8b3269752addf14aa81bd46fe2c050a38ccd0863150bbdf7ba65f3344c9b214923180d1db1f22e1c585003809d88b0879cd5dc07b93cfd731261f197811b1b185c2f0863b9f829df919791b6d6b9b00d2d6bdb033e2dd305a4d9b101ad77ac250182da34219aa2e00863c93c3479e77a7cf3f4a5f72d7960488cc01b6b57ed7f742990a4deb438834febf586bb9a2ed1ef7f1d2072eed324af995d60f03ec711433ed6c12813c98c43fc786b9a39f3cc0af8ac1441a1fd033bbd004eee21ecb21afb7172a072e000bdb123583176b3b38c2e0c70775b3d82d0f9f21cf899c6b6b5c413729911b13bb50ec968aec12231881c18baea932eedaf691a9d1a4daa3cdc3f3f65ef4fe82eae636d1e8dbf495145a3e03a56a88dddac529bce0f0a5619d6264ba8e24609a6d7e653f4ad4bc32a71aa4b81c2614053a784fb290ea74bb0622421a36c865d92033efd1cad5c67c2510c7d64feba0e670ea1a4850aefb34b25bb3a1b4714b9830ce5c694e727b22feb37377512ae70c6b4c1127a7741692e1473947846125a777a7ed48f1276d60c38c0812cc78280c9afdbb949f0c323070c40078e44b931ccc42120b001085fbca2f091e4ea544559282060efeec5623adeee2cf61949737471a6bc57352db80d127739fa9b9bf45b32074020a7ca3ce702f3a6c038950831e2eaac9580145e31c92ac0925317c7e56ee3a994424cbcddbd645e9694a6cb43244b52e5196c31844e4e4f0eb8d75dd3bf807e6868b369c325a6b0af78439e217895ab1042d3ad7df8ae8a560e8e39ea2673a89d9a265eaecce92a2438caa678327f6bad2198aceeefc6e67ae2aab23a770b0745dbe1c6388ed0377cea6eaea7d6e3d7f062f42896bcbcaf3ac6f713027aacb75981e7de0a40bf4d9c2a66926afe74475249c30213174536ceb092ec59744c0ffc99efa76fa6df6ff2b9ab0c5819117f859569561e2ffe0a4b6ddb93e893e2ce7298cdd5028b3af1c48b34c5f2b70f965d9a486a6bb957e0d51ba65761d6338fdcfda9d6aa5649b1f1f04caed31e4446288efcbbd59c2b671f1418af0cb9b7ca404a9cd34725a16fa0ebe9a51ca30ae1e64f43ce3618c7d56979a03792aa070124994106051ede1b66f6d4bd1ff09edba3488e9e2d3b6c7334ad729dc9a79feb25dc81710648e881e0550642de235ed466e1e9864b3ce5572bcc0525e0d1fa9a69256e756469a0108ad47418b640163c84833572bf72fe7faf93e2fae3a93e1ca851920a4d2e32a235b26a991eecc7d2bea6f9427b586b4ec4796957721c1849ec778a0c18464b0e31f7ebec57b7651ac028b3230ba0580a6955ba4466b5ef4c6b9fc894077ff58832767128399ee235b96cd0a9d8118ad499cecb754e62b9b1d951b1636b1020adb68f09331db7cf2f9dce20ff717ec0dedca96c6eae58d2e0d97ed8ebf04ba53304c8920184d63eeb76cc2b42d53d083170f7b5026093eaaa061badbe7ccf6ebf1231c2b9ba5c8b76f40a22c5037f7b1b0369ea7a7e5885a60c86323b33ad4fcaa5fdd732301dbf66d093c02a064894a55f9dba64d873ca2a188a2d3b6b64a817db791a553498a8576e28a6ecddcc1c0ab63a83ec5b55618ed1309378456cf0f72d39e9f1881c94659050ef2d31acdcff8b5fd6a364c465fa522a541adb28465a14aaf44c0225578f54f3bd66eedf7edadf6874d55b065f3bfe97191517333615c61890803c79b769f922f8497ce68a35487f129b8fcb09e1aa00bf196cda25a11ad09c7b073abc2dfde84d4a52137fc68c2681c3", @ANYPTR=&(0x7f00000001c0)=ANY=[], @ANYRESOCT], @ANYRESOCT, @ANYRES64, @ANYRESDEC]) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r7, 0x408, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x800) 12:36:56 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x79090000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0xffffffff00000000) 12:36:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x5000000]}}) 12:36:57 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xb80b0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x6000000]}}) 12:36:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000140)=0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 933.665548][ T26] audit: type=1804 audit(1571315817.191:516): pid=22852 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1021/file0/file0" dev="sda1" ino=17445 res=1 12:36:57 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x810c0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x7000000]}}) [ 933.772913][T22864] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 12:36:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc1410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d20f66100b0000000000000000000000c082c2bc4b1c2746cd9f1064f6b3d57d1bcf34ebe023e3855c8fb9d62ad7a7eadc8741ad76df686b9aff05fb97e649c420e9909443da569670972a2e1ed1418ea528069ac07a6a03f7d4aeb6b601122b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x4, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x1000, @bearer=@l2={'eth', 0x3a, 'nlmon0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x30}}, 0x41) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$minix(&(0x7f0000000500)='minix\x00', &(0x7f0000000540)='./file0\x00', 0x6, 0xa, &(0x7f0000001b80)=[{&(0x7f0000000580)="48e5480ed9616fa9db2b4c067d699149be9958dc83d3f26e85f5f0ac08259f3ca5823f93c92501f931b3eae51edaa37dbef59d849abd11b8f77ebd84f18cf3182c3c6d201f9b0d6d9796d6fc0bd265f158aa97d6b8b4df53680f7defd5e5cb097ad10063e1217ff0f8e317e0db60ebf369807921393e6280315dffc51325d34ff98b07faffc752f720560408289b06cc82d6d3c159c0eb420261bc0ede3b1ea6e5775975a7a409209c969d6cf56ac7e06898eaff5d1ccdebec69ad06b0c0a2a5b31f", 0xc2, 0x3}, {&(0x7f0000000680)="b02c241b81ab1ee409924dd7b4e29cde97fbaae6d516d06ad56d986f85ae29335f6e184321191ce3f9b22c9e050a37be277422e84174f95e57cf8ac96cd9ba48f3bfe2eb461808bb66749b848164f5ec73d8884bc7e55ef84313aec03a", 0x5d, 0x1}, {&(0x7f00000008c0)="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", 0x1000, 0xfffffffffffffff3}, {&(0x7f0000000700)="efdd1e1f01f6779bdf561ebac09f53a789c2f49c16f0c9518cf66744a6e759a9f342f2d1ed8d10be47022ce680532a80546610332d496c96b84e1edf856cad8cc538d9c5c266f5eb618189e708561f4f469f568fff77f52b5907fde2c5d7945b3310267f70e0d130d6a5b28cde2cb2b300b0d0a9ee20678991e904c7b1d42fe03153e48cc506f12edc0fa637233ce0", 0x8f, 0x1}, {&(0x7f00000007c0)="a3c4407c3a2df9789cccd5958f96a71436bfeb92aa11a6e00ca5cdc14fc29d82949d41d927594e76138a3daec42a182aeafd6ce426ca3da8a15e1a0d63be1a9e2b591de62907b761b8c144790b80cd759132bdd13e5cc453e5f2500c43834763f1f0e672b24eda1e2c63ea6cf3c9", 0x6e, 0x5c300000000}, {&(0x7f0000001c80)="46bf0fcdd898afddcfe654e919f18292bc9a78711088da5ddceb61a0b379170dc9033e4fbef63dc4f67ec020c3d9aa1a63d3921e808ad2de2e41ec4d3b20e504a8e5ea0784f42ce1a12d86628d720e304a5feb9bb7d7b589f08a683c665167b9a8b5d2f674b17aff3fb308a84c1e1c0e1c3f36deeaace0317c80cc0f296e5009b600429eac193ef19b343e48169f29cdb5b2a980bc3c968b58c48b2b3c20eb99df21c3d732cd190690f377f7afc93377c381adb4d95f51a2797bca7693d666e2e3dfb9c8a16373c540f3298bfa0448e4f2b5f49e915eef47c6094774644e9f824e1e6714d761ba7da61eae60b2ba8eab", 0xf0}, {&(0x7f00000019c0)="98221e5f6154f80d0422a65f09ea84ecdaed6a02e705366de17988566f61d0a3fb1b7d8eaa0f0a6082aa66adf8a62a3abc95dd8e13890ca10a9fab61796bf19a50b5a0b5ebedc83268f290b9e97bb345450f8f0b98528b082550895c7af661134be397a42241e491c8f1e9b293247acb51a0e154b9c95db9ab5f900e7ceab6a44ced", 0x82, 0x1}, {&(0x7f0000000840)="8f7069", 0x3, 0xff}, {&(0x7f0000001a80)="c7788c308f22adce63e4f204b301292aaa982810d50bd1f8c65c93268ad0bab685441dce5eb7b61f0a43f3987671c5a7cd547bbf55f03360b58a2ffb909ae254087dda2d94b70f9af9f447008a46e5586809ab7f072f960ffab4e2d6a134ad0bb4e1", 0x62, 0xca3}, {&(0x7f0000001b00)="24ba556e4c45649f52e5d30806ed364436a5b2fca22e1f675299b9ea46984816f31854ff54e95c371f2229b58a6e336215baa8e7c7f53468390b1f6e3d2036bb8a0a6fc1d15a4afdcef29054ca77341e98", 0x51, 0x8}], 0x146fc03206999503, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3, 0x1, 0x0, 0x6}, 0x21) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e21, 0x400, @mcast1, 0x7}}, 0x0, 0x0, 0x0, "1aa75a30053297a4a22d7d6fb3689708de6c28681d727547a2fbaea0b1ffc0e275c9877aa85c711a43d67dc7bb748303eff7ac37d76b8dc505ce6464796d25b5f415f6b6d2d636d2c5b652a33555420b"}, 0xd8) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) [ 933.896156][ T26] audit: type=1804 audit(1571315817.421:517): pid=22861 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1428/file0/file0" dev="sda1" ino=17422 res=1 12:36:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x8000000]}}) 12:36:57 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_setup(0x1000, &(0x7f0000000080)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x2000400) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0xffffffffffffffff, 0x38a, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000340)=[0x1, 0x6]) r7 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xd2, 0x200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x9, r7, &(0x7f0000000080)="9f5fbfd71bd2495083d54e8beba9f5bee7896fe6163ed3961c87e127d3b92a537b3c931bbd68", 0x26, 0x9, 0x0, 0x2, r10}, &(0x7f0000000100)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = syz_open_dev$sndpcmp(&(0x7f0000000380)='/dev/snd/pcmC#D#p\x00', 0x8, 0x80) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='Ojd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=ANY=[@ANYBLOB, @ANYRES16=r14, @ANYBLOB="08002abd7000fbdbdf25030000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008800) sendmsg$NBD_CMD_RECONFIGURE(r13, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r14, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockopt$bt_BT_VOICE(r12, 0x112, 0xb, &(0x7f00000002c0)=0x20, &(0x7f0000000300)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 12:36:57 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xc0010000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 934.040729][T22879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 934.071786][T22866] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:36:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCEXCL(r2, 0x540c) [ 934.117315][T22866] FAT-fs (loop2): Filesystem has been set read-only 12:36:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x9000000]}}) 12:36:57 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x84010000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x13d040) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xea76a9367610f2e8}}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7c00000000000000) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='ppp1ppp1!\x00', 0x0, r2) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0x4, 0x500, 0x7, 0x20000, 0x0, 0x3f}) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000180)) 12:36:57 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xa000000]}}) 12:36:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x64305e58fe9ed52c, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0xffffff7f0e000000}, 0x2000040) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fcntl$getownex(r2, 0x10, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r4, 0x65457ec0d596f20f, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x51ba4962240f3594}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x700, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 12:36:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}}, 0xfffffed3}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:58 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xb000000]}}) 12:36:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x301002, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0xffffff7f0e000000}, 0x8080) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/inmice\x00', 0x0, 0x400) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f00000000c0)=0x10001) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f00000001c0)=0x800) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000100)=""/177) 12:36:58 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x1000}}) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7ff, 0x4ee441) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0x2, 0x4, 0x0, 0x84000}) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x824dec974a585479, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)=""/119) [ 934.523062][ T26] audit: type=1804 audit(1571315818.041:518): pid=22896 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1429/file0" dev="sda1" ino=17825 res=1 12:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000020000290800000000000080000100000018000e00140001000004000000000000000000cf1d0d95bbab7b5daa0cc2597d3416792a32c390c594313a64b79c"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:58 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xc0020000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 934.644207][ C0] net_ratelimit: 97 callbacks suppressed [ 934.644213][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 934.655705][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:36:58 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x890f0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 934.684645][ T26] audit: type=1804 audit(1571315818.141:519): pid=22931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1023/file0/file0" dev="sda1" ino=17463 res=1 [ 934.724186][ C1] protocol 88fb is buggy, dev hsr_slave_0 12:36:58 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xc000000]}}) [ 934.729991][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:58 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000000), &(0x7f0000000080)=0x4) 12:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x50c0) 12:36:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = dup3(r0, r1, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20, 0x0, 0x5, {0x8001, 0x4, 0x2, 0x5}}, 0x20) [ 934.893621][T22963] netlink: set zone limit has 4 unknown bytes 12:36:58 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xd000000]}}) [ 934.992885][T22972] netlink: zone id is out of range 12:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', r5}, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801c}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x51) [ 935.022253][T22972] netlink: del zone limit has 4 unknown bytes [ 935.044210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 935.050094][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:36:58 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2, 0x4e2ed045, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) [ 935.104173][T22972] netlink: zone id is out of range 12:36:58 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xc0120000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:58 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0xe000000]}}) 12:36:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x37c0, 0x8000) getsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r5 = dup3(r0, r4, 0x40000) getsockopt$packet_int(r5, 0x107, 0x379f83bd86fa81dd, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x867e027608265ab4, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:58 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x8c040000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:58 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r4 = dup2(r2, r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x75, @empty, 0x1}}, 0x7fffffff, 0x0, 0x0, 0x0, 0x20}, 0x98) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x7fff, 0x2, @mcast2, 0x4}, 0x1c) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r6 = dup3(r0, r5, 0x80000) ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000080)={0x5, 0x0, [{}, {}, {}, {}, {}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_G_EDID(r8, 0xc0285628, &(0x7f0000000380)={0x0, 0x81, 0x629, [], &(0x7f0000000340)}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x1, @loopback}}, 0xfff, 0x3ff}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000500)={r9, 0x1000, "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"}, &(0x7f0000000300)=0x1008) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:36:58 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x10000000]}}) 12:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x836, 0x0, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x440100, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x65457ec0d596f20f, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8a142c01}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat$null(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/null\x00', 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = syz_open_dev$vcsn(&(0x7f0000000a80)='/dev/vcs#\x00', 0x7, 0x800) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f00000002c0)={0x20, 0x1, 0x7, 0x9, 0xb3b}) ioctl$KVM_GET_SREGS(r12, 0x8138ae83, &(0x7f0000000900)) 12:36:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0xffffff7f0e000000, 0x0, 0x10}, 0x40000) 12:36:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000000)={0x0, 0x2, 0xff, 0xb7, 'syz1\x00', 0x5}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x4, @capture={0x2000, 0x1, {0x4, 0x5}, 0x3, 0x8}}) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3, 0x1, 0x0, 0x6}, 0x21) getsockopt$inet6_dccp_int(r3, 0x21, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f00000000c0)={0x5, {0x1, 0x7ff, 0x40, 0xc0}}) 12:36:59 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xc2010000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 935.573888][T23005] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10620110}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) 12:36:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x11000000]}}) 12:36:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000140)=0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4020080}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000080)={0x0, 0x2000}) [ 935.629338][T23005] FAT-fs (loop2): Filesystem has been set read-only 12:36:59 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x94070000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:59 executing program 0: prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x100, @tick=0x7fff, 0x20, {0x8, 0xfd}, 0x7, 0x0, 0x2}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) 12:36:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x12000000]}}) 12:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000003600290800000000000000000100000080ff00007c00010000040000000000000000010000000001"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) keyctl$reject(0x13, 0x0, 0x10001, 0x10000, 0xfffffffffffffffe) [ 935.775602][T23037] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 935.828492][T23037] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 935.848374][T23043] Unknown ioctl 1077957454 [ 935.883952][T23043] Unknown ioctl 1077957454 12:36:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x25000000]}}) 12:36:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) ftruncate(r1, 0x2) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '}\x00'}, 0x7) [ 935.998437][T23050] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:36:59 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xc3ffffff, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xfffffffffffffcec, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x8040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000b40)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9400000036002908000000004000000099adddefe755ac4926faf3bf0100000080ff00007c00010000040000a94148cda9b172e200039141e55a26a932639e37b98470e4bf758cc904f64ff70f0f23fdff881ffdfef13918d85baab9f267b3d124148e2886f8e26a2008f7cc671d0f1d6d087072cc1b286f6ea8b6446fe7e8bb2105b55d235463874525e39b039bd197ed90ef5b6a476699d2c42d8e51360629611c298e5236fabe9d2de9320b133fbba9c2b2fdaf6df41375fe6f788ba81657226e8c1d9ace988e331ea7de7c3b0314f176ca48a28a3e3688961c"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fstat(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$llc_int(r9, 0x10c, 0x9, &(0x7f0000000000), &(0x7f0000000c80)=0x4) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0xffffffffffffffff, r10) sendmsg$nl_generic(r0, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x18144000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000400)={0x62c, 0x3b, 0xc02, 0x70bd2c, 0x25dfdbfe, {0x20}, [@generic="e3f98bf1ebf660b21b502d2a88c4df6eddf194c4ede1547b7adf2483cfba8f7a06729b5034c2e0b0ddd09bc7fd1c1f5f93335ede3a8646ee087f1abbdc7765b93f5d9610cca4b581fb468cb2b01de2c6218225a2bb4f461eef389f5d7192a75fbc62b1b3d01c34414a31def8b9509e564999007b8b2d26b253e820e7b621df2c457db037ac5a9f1d4f2941b379a9ec5fe8c2e5cb3531bf340567eb02c16a195c06465f67d30bd2eaa0e9945fc6556d82f3e099acb120867490fd077d00e04134", @typed={0xc, 0x7f, @u64=0x8000}, @generic="1f88299cec1beaeca57686e3397ad3c0e1544866d24dbbd97a1d7e4469b40d51917b65dba4551cb9ac84f80c5d9efb87981e36e37e10ab1087d272a94dae25d9bc1c7562a6293703d5f5cbcecca333ac1e45b747076c1ad432e51ad9c8405b", @nested={0x2e4, 0x1a, [@typed={0x4, 0x47}, @typed={0x8, 0x19, @pid=r4}, @typed={0x8, 0x71, @uid=r6}, @typed={0xc, 0x22, @str='TIPC\x00'}, @typed={0x8, 0x73, @uid=r10}, @generic="379e108baac498aa9a76aa1acd2b47a4db70dd4c5f3f2af068a6480f79000f31be059b9ca72ea32566cdfc6652b359da1688c8ff666258b0e58b66ccfabe87291e57eb9a49ca34d0133b96d602c40784d0a980f131ad4b20f11fd590c8f6f4461648f6b9487a7792eef6bb642a56bd3feda74c5058e6ac7cb7e12d311f08e21bd1e17a7dd20cc575571493a264f12891205bc973fe8dd4dd85dc69faac739dda19694673e92ea4fac2d983f991f25f3f0ff03325209f0e2c9518240757736b8fcdb8baa1ab98cb16bb747357886f094abf3c3cb13d39b8be3c978b4b6259e71d6f8d8e49", @generic="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", @generic="52d84bb846e9411ddd35c14dcdd97558950264dd3093f0a19ba315318a20fec202066d93cc3bcc696b11916bf77c9e85fc7913eedb0fca68f42ffd017e0eb305f96900da00ffc0c2c3afa8b0f514afafe7aacb0d813e0463f0280761fc8ca5bfe73db9c0992351c158a67a0118a964e183ec248604dbd8f16ef74f547e50f87e60c292b0a21bb52a7fdf0bfc10bc8d34d0457071665346be5f49ec03a751c2f6cde683a9fea803f6cee3b89d189133c79931b2b84c5444d9ce5a4a592f55451762b3ca5ab0aa945a0b7e43bc48fb35c815841383905950ffb2"]}, @nested={0x60, 0x3, [@typed={0x4, 0x56}, @generic="0a6c3a1a8c0f2d379760d5bf809e4d965d55650e5a1ee5ea23b4856fa7193695d26627b6d194afe3ee907a0fdab6144c5f863afc26b6b48d8293fae22521bd461f62103303abf14324dc", @typed={0x8, 0x91, @u32}, @typed={0x4, 0x65}]}, @generic="221caacd183d835df2c7e2eb1d15d91f04ffc6a69616de23fb927a4b6ab846146f7664895dbfa61c0b35aa032ba670fae998d0c8b835c7b89aeaacc5d51aa4be83f668a491774a0d20c58e", @generic="9c697c38f942a3275ed4ac95673e0313e891ec0c816dae4f95a74a16a531fe6213028f43eb398ac603f16fff78e03cf60dfd2cc12c1e22fc1d8c50481f441ebad5b989baf86292c57248a695332443bb3f6d1f1582d63b2a6083220c3ffb0805ee3d0ab89bad282b6ce515579cda2118762c61e29f24eaebb09ecec5f8983a91cc6bb0841955c284a68ac864b7df9357c35915b49d53e21ed343d4bc383d3208234935c88c957477affabde220d1e1162112c4315ebce6df119512c98a6a6e25b4a82858def79af2b3dbf2f42bbf1bb0067bbaa714f831b714a12502000e18a585af808108cf81d95e2b1885", @nested={0x70, 0x36, [@typed={0x8, 0x8, @u32=0x25}, @typed={0x8, 0x47, @fd=r0}, @generic="a43f5b3e30cd1dbce94e27d72765aaea9286838657b3772a373a2c36d93a057187933fb8dbbf82523292288258ac377d0ccd282edf8a515c95b991aa72009318d3a7fc09e38869158c18dd23ecbe353c02ce20eecd5d271c53"]}]}, 0x62c}, 0x1, 0x0, 0x0, 0x8040805}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r12 = accept4$inet6(r11, 0x0, &(0x7f0000000ac0), 0x80800) bind$inet6(r12, &(0x7f0000000b00)={0xa, 0x4e24, 0x2, @loopback, 0x7}, 0x1c) [ 936.094143][T23050] FAT-fs (loop2): Filesystem has been set read-only 12:36:59 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x9825610e, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:36:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x40000000]}}) 12:36:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM_EXE_FILE(0x21, 0xd, 0xffffffffffffffff) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x6, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x0, 0x8}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d776da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4b4f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000fa00000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b81fa63259e6d4bd0577298100"/99, @ANYRESOCT=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x2e}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x17}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd621c88b461b16d5}, 0x14) [ 936.265889][T23084] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 936.273741][T23084] FAT-fs (loop3): Filesystem has been set read-only 12:36:59 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x5c000000]}}) 12:36:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @raw_data="901a8fd4d11bc4dc09ef0263d135f81437f47c248baef1071d864f06658a493716ec4a9fe0ab289d5df77deb611a65119abe3c9ce1ae8b93e72ab0d4a53457c721c69c9349ec56334622a00f60fac8a8ece3cfbc59fe24ebbc0cfc9ae261a52357b2d90550044ef57eec466ba3a43c3d6322936b97c77e65f901efd2e56e06c8cd00c100509e42341cc8028e37dbc63ec02711dc04acf91bcfc31401d32720e5443a9c585356291ab7fc433c5d30ac2c07e74d45b01189040299fb4fcd51c86fe55a8300df0e84d7"}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x58, @broadcast, 0x4e21, 0x3, 'sh\x00', 0x2, 0x7, 0x51}, 0x2c) 12:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x20000000000036, 0x829, 0x3, 0x0, {0x1, 0x1000000, 0x1000000}}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) 12:36:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe81af4fcb2ec08ae}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}]}, 0x58}}, 0x14841) [ 936.420036][T23089] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 936.484750][T23089] FAT-fs (loop2): Filesystem has been set read-only 12:37:00 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xc8090000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:00 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3ab, 0x400) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0xba, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000100)={{0x9, 0x8}, {0x0, 0x2}, 0x22, 0x0, 0x2}) 12:37:00 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x9852920f, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000000000000000000000000007ff0f520cecc2eac43d41b35f9f1a6154c8b6de8c3c2bd87e318b8609d1ad8d4cf322a0dfb0bc5f6b84c5fda31b815d6b94cc46c601441f6ea8a6375f679ca5c0c89494a76e39bfc"], 0x14}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f00000001c0)="c6b06fd0398c73cdbd71cb63bc5d4e94455bfb050efb923a03c97b5d220e0ee266efa3d0e390e073fcf28bd463111f15c003806ecde8c4226ef1f845dbb373f46dadcb7125b8f6be0898b4dd49f585dff469b192e1b78900d84c7f509016bd8a29", 0x61) alarm(0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="94000000360029080000000000000000040000000000000000000000000001"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[]}, 0x1, 0xffffff7f0e000000, 0x0, 0x24044014}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0x9f0000, 0x1fe0000, 0x1, [], &(0x7f00000000c0)={0x990a7a, 0x3, [], @p_u8=&(0x7f0000000080)=0x3}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r6 = fcntl$dupfd(r4, 0x80c, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fcntl$addseals(r11, 0x409, 0x4) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000140)={r10, 0x0, 0xfffffffff0000000, 0x100000000}) 12:37:00 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:00 executing program 0: ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:00 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}}) 12:37:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) accept4(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000000)=0x80, 0x800) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:00 executing program 4: syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:00 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xc8190000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 936.921865][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 936.921874][ T26] audit: type=1804 audit(1571315820.441:523): pid=23158 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1028/file0/file0" dev="sda1" ino=16641 res=1 12:37:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000080)={0x13, "d46020628cd1ff7bb7e9c6a9773d22e07975dc2d174745b136216727e7cbc77d543da58ad0a4560c3f87e5863e0c7da1dd2d10114e6ef8f7b2c408c8e1e6c6b8bdfb27a03a57ffcd5c4a0f3d563e0102bdf033fa74f36dea4e18b0aa74fca162f5963c3c55f2a7425ed0ececf3b491d6cffa771eadb0019d46e24ce9f165f379"}) write$9p(r2, &(0x7f0000000040)="f5ac0e6fc3ab852487e8b2b63456e3ccc22ed7af4ee2297077f3978e876b8b5ce2299a23d381da24749fa1e756841d74b5f347ab7463d4df0fd253ab", 0x3c) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:00 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x98f82f0d, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:00 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3]}}) 12:37:00 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) write$vhci(r1, &(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, "a4a9d509eb39c41a69e859496e7961a1fbf0476747008cccd6fd7e947305822d4d6e538e90effa5d157b9d0933cbe4e8d92f47c0b0f7b46ebe33808ea1b05960bd478950e605cfd0fa4209b12d574fb35bf4224566568a1b7ab6d2dbbf74fe80741eaba5b687cbc72f80a114372ff858783c9171d9c148c10957135b793d4193c417e5f144b2b63abd77dcf65371ffda8c4509ee51e6db12ee152b2ef603d8dc92440f423d927eb2f5933104f2807636caebe439c60d48dd6139f468364d76f26efa5375a455514b781a3a98a280e4bd9c8abe23904613b53a9e62ba48f5293b2b3f02d97be6131b21e6de6aff"}, 0xee) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {0x0, 0x9}, 0x0, 0xffdffffc}}) 12:37:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0xfffffffffffffeac}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000240)={0x101, 0x39e, 0x2, 0x1, 0x10, 0xb5, 0x1, 0x1, 0x18558, 0x3}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x448800, 0x0) signalfd(r2, &(0x7f0000000140)={0x8001}, 0x8) 12:37:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0xfc}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x13) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f0000000000)=0x3e7) ptrace$cont(0x7, r2, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:00 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}}) 12:37:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000080)={0x4, 0x0, [], {0x0, @bt={0x80000001, 0x5, 0x1ee6663520199fc6, 0x0, 0x9, 0x9, 0x8, 0x400, 0x9, 0x52d, 0x0, 0x1000, 0x8000, 0x2, 0x0, 0x19}}}) 12:37:00 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xca080000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000000)={0x20000000000, 0x7f}) 12:37:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x27, 0x2, 0x0, "9b030e94cda6747b10be106911ca91f7", "7be2591e9a16e8bb00a395e3f4bbd800bc0c"}, 0x27, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000200)=""/189) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000003600290500000000000000000100000080ff00007c00010000040000009a114fa100"/53], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:00 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}}) [ 937.352485][ T26] audit: type=1804 audit(1571315820.871:524): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1029/file0/file0" dev="sda1" ino=16785 res=1 12:37:00 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x9c0a0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:01 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6]}}) 12:37:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0x0, 0xc800) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000440)=""/72) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x10) getresgid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) setfsgid(r5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01000500507900504beb6fd70000"], 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1840}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="f8000300", @ANYRES16=r6, @ANYBLOB="000426bd7000ffdbdf25060000000c00070008000200000800001c0007000c00040003000000000000000c00030028410000000000002800020008000100ffffffff08000200f8ffffff04000400080002000400000008000200080000002c000700080001000600000008000200ff0700000c00040002000000000000000c000300010400000000000048000100080003000400000008000300e300000008000300000000002c00020008000100080000000800030000000000080001000e0000000800020000080000080003004000000008000200040004001800070008000200000200000c0004001f00000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000000f8ffff0f0000000000000000"], 0x14}}, 0x0) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000200)=0x10000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000003600290800000000000000000100000080ff00007c00010000040000000000000000000080000001"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) [ 937.577253][ T26] audit: type=1804 audit(1571315821.101:525): pid=23208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1436/file0/file0" dev="sda1" ino=17073 res=1 12:37:01 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000540)=0x89) setreuid(0xffffffffffffffff, r2) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000340)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f00000000c0)=0x80) ioctl$CAPI_CLR_FLAGS(r3, 0x80044325, &(0x7f00000001c0)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x124, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0200"}}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000680)={0x6, 0x118, 0xfa00, {{0x400, 0x5, "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", 0x33, 0x9, 0x6, 0x0, 0x7, 0x2, 0x0, 0x1}, r7}}, 0x120) 12:37:01 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xd20f0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 937.772012][ T26] audit: type=1804 audit(1571315821.291:526): pid=23235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1030/file0/file0" dev="sda1" ino=16913 res=1 [ 937.886812][T23249] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 937.895178][T23249] FAT-fs (loop3): Filesystem has been set read-only [ 939.924204][ C1] net_ratelimit: 45 callbacks suppressed [ 939.924210][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 939.935722][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x400000) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x800, 0xfffffffe) 12:37:03 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7]}}) 12:37:03 executing program 4: memfd_create(&(0x7f0000000140)='wlan0^\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@null=' \x00', 0xe, 'bpq0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000300)={0x2, 0x481}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000040)) socket$tipc(0x1e, 0x5, 0x0) 12:37:03 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) write(r0, &(0x7f0000000080)="a05c32ecf22887024fd3640de63d064d38c42c836ecaee517608ab4c48672ae0ab5a41c0b0f7ccf080a5598369f9a658814ab7682675ac6f1fc1cc6eac4505c85e6269b0cdd313a90e84a8ec2247340c44319affa604d5e582b0b5fdf116c84b29f4bcf141ecd7fffefa6cd89503bca895281485d0f01abfac2c8195884f832a1aad3d57abab47983ef247f58ebf83dc2a13f50f3e52f7", 0x97) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0x0, 0x8, {{0x0, 0x3, 0x0, 0x2, 0x0, 0xffffffffffffff2b, {0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x1, 0x0, r3, 0x0, 0x81}}, {0x0, 0x1}}}, 0xa0) fchownat(r0, &(0x7f0000000000)='./file0\x00', r1, r3, 0x1000) 12:37:03 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xa40d0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:03 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xda060000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 940.342239][T23269] netlink: zone id is out of range 12:37:03 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8]}}) 12:37:03 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) [ 940.398992][T23269] netlink: zone id is out of range [ 940.404601][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 940.404656][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 940.408671][T23278] netlink: zone id is out of range [ 940.416433][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 940.416486][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 940.434382][T23263] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 940.442213][T23263] FAT-fs (loop2): Filesystem has been set read-only 12:37:04 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xa7020000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 940.492644][T23264] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 940.495723][T23278] netlink: del zone limit has 4 unknown bytes 12:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x35, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) [ 940.552613][T23264] FAT-fs (loop3): Filesystem has been set read-only 12:37:04 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9]}}) [ 940.640513][T23296] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:37:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x1, 0x717c, 0x8000, 0x4, 0x8, 0x1, 0x6668b26e, 0x9, r4}, &(0x7f0000000140)=0x20) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) getsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 12:37:04 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xda160000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 940.727633][T23308] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 12:37:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x1, 0xfffffffffffffff7, 0x9}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x2, 0x5}, 0xc) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETXF(r3, 0x5434, &(0x7f0000000180)={0x2, 0xff, [0x5, 0x4, 0x1e5, 0x9, 0x1000], 0x1000}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x3, @rand_addr="9d6e4bf7baa02526cb046f6419a9bd87", 0x818}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e20, 0x800, @remote, 0x2f6}, @in6={0xa, 0x0, 0x4, @remote, 0x4}, @in6={0xa, 0x4e24, 0x5, @local, 0x100}, @in6={0xa, 0x4e23, 0x10000, @ipv4={[], [], @remote}, 0xfffffffc}, @in6={0xa, 0x4e20, 0xdf, @mcast2, 0x4}], 0xb8) 12:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0xffffffffffffffff, r3) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = gettid() r7 = gettid() sendmmsg$unix(r5, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x70}], 0xfd, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x4b8, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@typed={0x8, 0x2c, @u32=0x2}, @typed={0x8, 0x2b, @uid=r3}, @nested={0x108, 0x71, [@generic="4288ea6c69ff30f9863da7c6e0a527644f6f2aa50359dd167e2d04cdbb7fad47d12ac95a5a16da55a8b8896683ff0a5100bcc91b6c52ce309a5b099d783e4f1e9a2dcd8a299f1f403aca5b6e509f407b0b13d886acc9f0cf502a2d2b3e38e89a0b714467a16693b7e7a0260de8db81bdca1bc470aff7e40236c81c09f84e5fe703fe1740fa6948610914b44b15ccda7d3ad4fbd817d722be574c36a1b72cf27df7e556269ef3f274f0a3ee0bebf5c088022a9193365c0dd4d4221e532fc42616609f108acb434e16fc2e758b8309d70aa50001811290e5101fa9786e498504628a0e725a68ec1402493cdc9132be6c378effb7c7bbf3af3254", @typed={0x8, 0x29, @pid=r2}]}, @nested={0x1b4, 0x78, [@generic="2bcfe0cd7935120365af94a7eddf759c2ad0957b26211e2b98791afb71365650ac9ccd4d6eb061bbb49e1984c9f57969d195d887b0b11720adeeeb8a2c6171433666b036e1efbf2b40be985d52ccfefe135c18c2cdf9a7b91e9fc10feff7065318edad0371d623e6d1ea4fdc2b4fb1619797fc059494997bc5a71c3ee53587404212c9384b46342ab6623748a4b9f7edb5a0ddcace4585bf9a2ed3621b019d06086a48793c854404df5632ada648032be088bffe01cf72a00e572ba71d13db403e6c52b1d7", @typed={0x18, 0x0, @str=']{}systemsecurity.$\x00'}, @generic="6eb403f9e6a8665683442d65e5458d0b34aeb48f0b3a66266f7806462f3e45b0cd0244e5769162b3732401b9899e9183fddeb33034b25641f903814a57b8ab83c8b5e16765f7ffc54869c4812a90987d8264bb9d05fa82cd2b116335d858f42c916bc9730d77168716237ab0e93d60acaa157c4061e57d4da6ef8a48681c6a06d15bfbd176138770e174e68db46b487d1de2fcf2a09a7dd2e4b715f375a7688554c77b0d6d3789eb87af36c93abef46eaac63de0cd0909072d1fcb0b723a04829554eda990556217", @typed={0x8, 0x78, @pid=r7}]}, @generic="d0999ecf04cc0a77fbdf974c31be6a8cafd1f38674f5bf9a2a3695544e299f38d083043811053b64324576ba9dbe2333068dfa2fe4e85256198c1f9099d0b5cbfa0ba275902e23b9256ca005ca3bea0c85d6b01df7c7fa9a91d8e0ce802be70ee9c4ae8bd7fd3627070289328c644d695089a060772da8865cad45326218569857d3aaa6fc5005dd4afc45949b962a243819a2fca574a9084b4a88294106500cd0c922c0f8f27f81a62107a6a2603bec9cd7725b12a312d4290b045eec396ed322f77713f4c38756d525d651be6f06a35eb57b4da1aefe797befd59ea18fdb7ad51839b650b13a5ceb280e0ae4a9de", @nested={0x14, 0x60, [@typed={0x8, 0x79, @pid=r8}, @typed={0x8, 0x0, @u32=0x3}]}, @typed={0xcc, 0x78, @binary="ad74b9e719c5310e012627faaf93e26663b74b291316a73168387c683a646ba696fa12e9db9045691b6c663dcd25a3ab248b90d36b300ca22c2b3f01af47513dcd46828e692ccacf437052ecae89124bfe388ecb70e6482a58627cc70c9ef03948aff699ed7769623885daaef24a701d7a9e8183f491b36c7eb014d771ebb4cad65d20c2b1d4492ef4d8b3fbafab29a564ce541f63e8af872910670a8acfc95ac563c8387122d3313a0bc15d3981176f7f979cc0d9ebe4325413444934ed0730017632db62b1"}, @typed={0x8, 0x22, @u32=0x9}]}, 0x4b8}, 0x1, 0xffffff7f0e000000, 0x0, 0x4000140}, 0x0) 12:37:04 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa]}}) [ 940.917251][ T26] audit: type=1804 audit(1571315824.441:527): pid=23310 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1032/file0/file0" dev="sda1" ino=16657 res=1 12:37:04 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xac000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:04 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xb]}}) 12:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000000000000f0daa73ef5c14f"], 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) [ 941.042769][T23322] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x0, @output}) 12:37:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x35d, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:04 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc]}}) 12:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x22800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r4, &(0x7f0000000280)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000300)=0x4000) [ 941.174179][T23322] FAT-fs (loop3): Filesystem has been set read-only 12:37:04 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) 12:37:04 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xdc050000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x54083055d443194f}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x118, r2, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcde}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40e}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffc8}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb0cc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x100}, 0x40000) 12:37:04 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd]}}) [ 941.381549][ T26] audit: type=1804 audit(1571315824.901:528): pid=23361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1033/file0/file0" dev="sda1" ino=17169 res=1 12:37:04 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xaf050000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x10312, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000036002908000080ff00007c0001000004000000000000000000f1e5463f01"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) flock(r0, 0x7) 12:37:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x1ff, 0x10000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000080)={0x3ff, [0x7, 0x6, 0x5, 0x0, 0x0, 0x4, 0x1, 0x8e, 0x0, 0x9, 0x7, 0x1, 0xff, 0x7fff, 0x3, 0xfbff, 0x1, 0x1, 0x5, 0x40, 0x81, 0x8001, 0x5, 0x4505, 0xffff, 0x7bb, 0x7a, 0x2, 0xc905, 0x40, 0x0, 0xfffa, 0x80, 0x8bcb, 0x401, 0x7, 0xd1, 0x6, 0x7fff, 0x7, 0x1, 0xfffc, 0x3, 0x69, 0x2, 0xf9b, 0x1, 0x3], 0x3}) 12:37:05 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x1) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:05 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe]}}) [ 941.599615][T23395] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. 12:37:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="26efcaf11159ab94ca81e3cc5c99958d", 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x80401, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0x24, 0x15, 0x10, 0x4, 0x4, 0x5780613b, 0x3, 0x1b, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x10001, 0x200000) ioctl$RTC_WIE_OFF(r4, 0x7010) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f00000000c0)={0x1, 0x0, 0x100, 0x0, {0x6, 0x40, 0xadd, 0xffff28b2}}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 941.661708][T23405] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.4'. 12:37:05 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10]}}) 12:37:05 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff9c81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x33}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff6d25}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) [ 941.751922][T23399] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 941.760080][T23399] FAT-fs (loop2): Filesystem has been set read-only 12:37:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=ANY=[@ANYBLOB="71bb877f0abf510000000000002286a1ccd8239441e34ddf7bb53da560116ae40496fcfc595aa8299e923b58272e50f9ec12f94390c0e4c3a1a1a720550e5fa487d0a775960c0445f382f0a229b92236ef4d0b5f4385dc51cecb0ba8cd8a8e24c885101d479f8e7f0ab5bc3e893294d93db206f8c4def9adf42f4971dcb84b043a87ff778b133d65f34514a796b64c5023dff3f6dd3872b8e2230e9ea9a599f46f9b0b6793ab3abeb317aea2b1d7c86f9f9acf007deb3d0171ac318717d767844391e7f8b809878167"], 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="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", 0x1000, 0xffffffffffffffff) r4 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="97", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000004c0)={0x0, r4}, 0x0, 0x0, 0x0) r5 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="97", 0x1, 0xfffffffffffffffe) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000001380)={0x20, 0x1, 0x0, 0x80000000, 0x43}) keyctl$dh_compute(0x17, &(0x7f00000004c0)={0x0, r5}, 0x0, 0x0, 0x0) r8 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="97", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000004c0)={0x0, r8}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000001340)={r3, r8, r5}, &(0x7f0000001580)=""/139, 0x88, &(0x7f0000001540)={&(0x7f0000001440)={'sha512_mb\x00'}, &(0x7f0000001480)="efdc6b7d027cbacdf395cc363ecec7a87075d0cfe9bd06ba56e45eb1e347e29f1593824e7d5ef9a6bcdadbed7c6c55cabd7a2cdfda47f2d56245e772fb15a15a38c5a10cb22336457e51f309bb6714888d4e9496184272d8d9899e87dcb2e622b7c031860c21a14b08a83eb0f3e2275b19407362d9d4176955bd748b982cd40b37e962c27193625663ee2df179b87daf91f967403f8612c0ca1a", 0x22b}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) 12:37:05 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xe20d0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:05 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xb0010000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:05 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x11]}}) 12:37:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c700"/20], 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000003600290800000000000000000100000080ff00007c00010000049200000000000000000019000001"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) utimensat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}, {0x77359400}}, 0x100) 12:37:05 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_dccp_buf(r2, 0x21, 0x2, &(0x7f0000000340)="57697ecacf6c66cffb45a598db8fc7f6cae7d8a858fb2d40eea4d02bb3d3894342", 0x21) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x4) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7, 0x6, 0x6, 0x80000001]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x60c19561ced129b7}, 0x8000) 12:37:05 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x23) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0xb, @output}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="00fe4aef8f654936d34d686bae200f66a6dee5cbd49ba0f8fd1ea69da001bdf1557ce6b343ba555be1a0bc5a70bed1902d3214d3162813be1703000000000005000000000000000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000)=r3, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"0200"}}}}, 0x90) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r7, 0x2}}, 0x10) 12:37:05 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x12]}}) 12:37:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:05 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000ffffff7f00"/20], 0x1}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000200)={0xb31, 0x0, [], {0x0, @reserved}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) [ 942.285138][ T26] audit: type=1804 audit(1571315825.801:529): pid=23453 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1035/file0/file0" dev="sda1" ino=16993 res=1 12:37:05 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x25]}}) 12:37:05 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xb7080000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 942.357054][T23446] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 942.400087][T23446] FAT-fs (loop3): Filesystem has been set read-only 12:37:05 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xe21d0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:05 executing program 0: ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000001c0)={0x6, @output={0x0, 0x0, {0x0, 0x1f}, 0x1800000}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x10001, 0x7}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1300e0ff65fbff0300000006003e0032301430"], 0x13) 12:37:05 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x83, 0x800) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000280)=0x7fff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) bind$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)={0x2dc, 0x0, 0x0, 0x0, 0x0, {}, [@generic="ca94f5e12f6a3884e9a6de0d0aef33874da1607ee1ccd3d30611968ab01f05b0d8dd22f17e4e8c52459ec4a93ea70ad6c061e6b37bb9a0875dabcf83f41e7e0779e6c9edd6529cec99f7f42297088cdf5223c908c29f5d63e2bc8f2883d827e1c1c2b5515f0228cf02ea56b81cf2b185d36b117a0871029b89825b5543f971db7f1abdc749be0eb0cedd87f730045f105c42590a744394f41a4a7e7d7363cf62d7ab37bc54852811f1631bf9faa6a9698f23c723fcf7f011900103478b9636b5427c2944968c157b0b89dde3eac29f0013e3bc9032ac57f1abfec63658ae2c243b0f", @generic="badd73e8009af4b30cf6c2ff6fd09b104ba8f6d63365f5bd31b2cf60a0517b264c9f826061752cb4b3b7e1738b79b983d01158d9f7058294da97a91e59a6a57264bd76fcc034cc79fd2a65f35db973bf49593420cf2de872c4b8271d5ff065be3076de118f3fa9c0a62477cb57e076e1059b0ec85142f85c1e07046a66602ffb08b304fa9909df4c62cb1ebef9346e348311c678a8834a28b77719187fa6cf2d2021a54c604acaf5ddc971586b58bf39f6ef96c8a5450c3ac1eb57c965c9da72e090b17a315ed5", @nested={0x118, 0x59, [@generic="97c1d77480ada37e883a9c3263df4a6981efa4d7eef422b86575cdbc6cbec535d5181e93d171806260b4177ea5272d7cdd7e3ed2c50fe5", @typed={0x8, 0x15, @uid=r1}, @typed={0xc, 0x53, @u64=0x7}, @typed={0x8, 0x0, @pid}, @generic="d5d0d082f316fb391ef994eacb9055ce9a90dbff14877a959063678ab88c1c51a9ef2c2f33b9a39248c4066451190580a0e589bede6e1b5d71312178c00c2e919c094a93a462cb447af25aee7aa28243b581e86f0360c71d2439c6cdfce515556fb3fabd279c865e1a729b54be0e767dd0765c317f4e3459beae8468c27a1e4c7ff8b47dacde9bf88527a2d39b488f892d17b46b5dd45e124b1d6f568caac233a8c13e1d729119c05f062cf4464be0ca8d3275c5b6db6287029dcaf8ab870a87"]}, @nested={0x4, 0x40}]}, 0x2dc}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000036002908760000000000000000000000000001"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_setup(0x9, &(0x7f0000000340)=0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) io_submit(r3, 0x5, &(0x7f0000000a00)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0xab89436015d1ec72, 0xff, r4, &(0x7f0000000380)="2b5bcd2d0d5bb53453f377b772905f88855e886d6c7d373c7fa3387b1c994953d4f560cb19114b151624d3f8be22c55e3fa6de4ecb7aca51b5217728d728750496d12e2e56e3818ccbba1a390cccb0beb4e370069c51b383cd0a8fa2a8e0b17215a62fd625a4fc1747af69a9aaa77cf774864e241d87f7bd6f7895428cc98239daa0c095687e4a048c8d3aedebf2af57da72af59e9927acde9dcf4207dcb28fbf6f31077c27d5e417c7dae4578f46f232745cd338344661a5efe08c8cbaa496de54a1dfdb150e9cc3bd7bc65bdc6a43ea9e05eeba6968a1e32378deffca0451b2f69850c4c3e15a8c0ce23fd77710567", 0xf0, 0xfffffffffffffffc, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000780)="56bea9db7ea797083e4668df9e677067411cc8c35c789352128fbb4f8fa6fd08b58250fd7aba1f893e381e30fe307e10337eb4abbe6dd11f3e64b870c9b758b524da745a42583f264d7277dc1c68d30481ce1e9dbb2d34c9a0cbd196498b0732aa2f95c32af6ce22", 0x68, 0x1, 0x0, 0x0, r6}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x2487, r7, &(0x7f0000000800)="a977d8f2929eb2fb853e9879346248", 0xf, 0xde7}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x0, r8, &(0x7f0000000880)="0c9c81c76433290227f4af6323f26f8d507ebd98c8625e9cfb71a523a2989f595454392fcdbf509f8f98dd544941adfe7b48012ae925f652d40177e77d00", 0x3e, 0xd7, 0x0, 0x6, r10}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x6, 0x1, r11, &(0x7f0000000900)="94e93608420cf989575fd5cf8efc195fa275463c72621833f9bd0de420f97e3ca4e69ebb8973b4a5083f058fb17b6cab8ea4613fbedb7366040570ed267dc68f931c8ff70d0def644b16232e564813b3f985ec576d6d2369227dc2485a1773f2b1d1da9f56c50566beae13c2ed665729348bae9b28ba02e197a9f87e1e1d0b368d2e3b850fe7224f4a36b8745a6f0e5b35708aa29e3b4517b35349d320873fbade7abc54b51f319d9269", 0xaa, 0x1}]) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r12, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) 12:37:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x100000001) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:06 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5c]}}) 12:37:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3, 0x1, 0x0, 0x6}, 0x21) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000080)="a19cac0ed66d59c442c383a4b5c73286d780f088ff96af9fd6198fd7e095d26e1ec4f8c63278f974334542396d8b857900aa17a2aec15095e57945729309e0f39ffb52048a468fd3bb94543c6acd9be346527d1759a209ed2cfce0af720f57d36fcaf2184c5698ecfc84d921efa93769c127f63d7570bdaaf2fbe0c15eaa2d", 0x7f) 12:37:06 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) pwritev(r0, &(0x7f0000001780)=[{&(0x7f0000000200)="c9b39787113a03416ce230ba278a44dc5823c91450134fdcaea0480b65478adfe7e12ea2fa00cf25e9460d1f8b605ae309fbd468695459e17ab72d7bade233d90cdc8375224ccd79c5e6410574bede509bdc2c7505ef2d33f3af88dc84be423d02bdb7bbf913df5705ffbde7d0abb0a5ebd343afd48506", 0x77}, {&(0x7f0000000280)="9949711e4138a50487c7dce13ec572ef8d71184aa6d3c81c3209154189fda0bfed426e6fca836411ffe9fe461af556c51c17b04ed819edd4f69aef8b85bee1b5cb98ab128b62b6", 0x47}, {&(0x7f0000000300)="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", 0xfd}, {&(0x7f0000000400)="6932e52bc8dca2e7bd4b5d7c42525602bfec6f85ec75f193644c8d8257663ac6aa7d801cc53c6991bbebd13f6852719f070d4ad9ea3bdf85cb7e406e704dd3ba0755c431", 0x44}, {&(0x7f0000000480)="1b011fda84e79328beffd7c38b08c2f3f114d4bcf18e601bd01b8bfd3eb96803162208653ceafb1d1dffa1118c5dbba37b1061208b2b53abd9a86e66b842fab8aa3315c6e1eaf19028fbfd440b647f7408a12b5e972256ee6fe8bd8636cf267c5f7dea73c117a612003c3cf4b9d3334f8f12b62ee091978839b02d028ce5ef784ac5e248e81799164017db14b31ed17d816e60583ff090d3c9c9d25e10bf0d2c006d1704b130031ac0eb467116b32332", 0xb0}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="65975094135be3efd02ae61a9b6e3d1b7e221bd09c5d289fc3761a604b089d5f75672600199d2e6827e6946762dc4827b50a3a2d084e9feea33647a45e33d7708a3a2c7d09b8f8c9ba329377b586c63866deb327952d5ae0e3de17946867b37dd0525b1599c57fdf65d760f09f10f4cdabda3ba882592ce89d46cd69a8b5b312581b576d1234a96e9b632f374b55124fd93de3febf391a7b50ca911fd6acb845bbc712284cfb9db6b80e78d24202aeb401a7f089d4a767fbc83ff8b17a009faf9db0725869a6da87d2d2d96125ee", 0xce}, {&(0x7f0000001640)="2ebf57f44a8d51b7f968e39eb4963238707ab985310fd34189629d71bce9132e013d9449b79a0d1379e26a32f5b1d8412deb38236f647fb2ead289256f90649810b1b75bf1ba776f1a06a82052947e63a84961e8dc88c9542d1857f1fa", 0x5d}, {&(0x7f00000016c0)="bf0aeb91c26d9a15bad16d96a5718dd61df41cb69724c8cbb09c6fb601505e3e9cbd2e73913c14503c1b09c1ddd2839567116192e5e56a5d40c2f1c78711690cc63e7430893ba14638050e6a9e0939a200702539f54b07265445acd4a90c00dbb690f825ab20b1b0ac0a1e253ed7c98e4f27deec4758883a2bccf8c8b0297382eb995e5832416713454879d54894ff9ee9", 0x91}], 0x9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006fc0)=[{{&(0x7f0000001840)=@generic, 0x80, &(0x7f00000001c0)=[{&(0x7f00000018c0)=""/66, 0x42}, {&(0x7f0000000080)}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000001940)=""/195, 0xc3}], 0x4, &(0x7f0000001a40)=""/154, 0x9a}, 0xff}, {{&(0x7f0000001b00)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001b80)=""/160, 0xa0}, {&(0x7f0000001c40)=""/135, 0x87}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/226, 0xe2}, {&(0x7f0000002e00)=""/63, 0x3f}, {&(0x7f0000002e40)=""/106, 0x6a}, {&(0x7f0000002ec0)=""/222, 0xde}], 0x7, &(0x7f0000003040)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000004040)=@xdp, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)=""/140, 0x8c}, {&(0x7f0000004180)=""/47, 0x2f}, {&(0x7f00000041c0)=""/56, 0x38}, {&(0x7f0000004200)=""/246, 0xf6}, {&(0x7f0000004300)=""/212, 0xd4}], 0x5, &(0x7f0000004480)=""/4096, 0x1000}}, {{&(0x7f0000005480)=@rc, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005500)=""/151, 0x97}, {&(0x7f00000055c0)=""/138, 0x8a}, {&(0x7f0000005680)=""/31, 0x1f}, {&(0x7f00000056c0)=""/205, 0xcd}], 0x4, &(0x7f0000005800)=""/169, 0xa9}, 0x200}, {{&(0x7f00000058c0)=@caif, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005940)=""/78, 0x4e}, {&(0x7f00000059c0)=""/66, 0x42}, {&(0x7f0000005a40)=""/53, 0x35}, {&(0x7f0000005a80)=""/193, 0xc1}, {&(0x7f0000005b80)=""/20, 0x14}, {&(0x7f0000005bc0)=""/161, 0xa1}], 0x6, &(0x7f0000005d00)=""/223, 0xdf}, 0x5}, {{&(0x7f0000005e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000006f40)=[{&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/178, 0xb2}], 0x2, &(0x7f0000006f80)=""/20, 0x14}, 0x1}], 0x6, 0x40020001, &(0x7f0000007140)) sendmsg$inet6(r2, &(0x7f0000007580)={&(0x7f0000007180)={0xa, 0x4e23, 0x6, @mcast2, 0x7}, 0x1c, &(0x7f0000007440)=[{&(0x7f00000071c0)="ad2a45fb04a9b4bb45b08dd9e198628e85ce3fc14789f651d57226bb04a20dabe54c53", 0x23}, {&(0x7f0000007200)="4d8b8c5f8d0d7f541b14cd52133b2ef57a35e86c46", 0x15}, {&(0x7f0000007240)="8b43b3fe3e43c493ba9da9da0410c60b92cb87776b070a9c68a70ac17c226fc7fbabc70cf2181537121af71cb4b8245f32d74a7db8c37a600bd6a1eeb042af848f4347007b14cb96edab161e3e5c92a8c49dc3be7e956138927a0419eb3f93fe67630738d7be83319a79db6c637f330cdd4f1a6c516c18f2890bb65fb67c", 0x7e}, {&(0x7f00000072c0)="e6e81c8108770b4581251a63772dff370ac9ef8dc0340a5d691a2996320bdf278c84803400d1a62189947e21617a94ba1bea0aad2db89ec4966e4450a00d7ad61a7f80d574847f7596111bc774561355501231d4203866baaff767e0687613c51d6739cd4d2334e9781afb54f1e984a91f5074ef9ddab5c77b35e560683b52ddf8eefe841550f7d0f2c7cf8bbf89e84adddf2a07fb815318c78c4a847677c3bdba32aa4c0261ff85e25aad641965961d18", 0xb1}, {&(0x7f0000007380)="c4878a2a694d3ce9948626143ec76088f7c1a49ff877d7995e24163db714f001bed26d96f3a0257f5920c6b357382bc3e1c845427b40b37165f557bc07b598bf0331b5dbe75c4efda33d0e76ca31f8bf3c24", 0x52}, {&(0x7f0000007400)}], 0x6, &(0x7f00000074c0)=[@dstopts={{0x20, 0x29, 0x37, {0x5c, 0x0, [], [@ra={0x5, 0x2, 0x8}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x3b, 0x7, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xa1}, @calipso={0x7, 0x10, {0x800, 0x2, 0x4, 0x7f, [0x20]}}, @calipso={0x7, 0x10, {0xfff, 0x2, 0x7, 0xff, [0x5ac7d2d8]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xd}}], 0x90}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)=0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080)=0x60, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="94005a2703a2514000360000000000000000010000e280ff2400"/37], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x4b34, 0x0, 0x6, 0xfff}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x13, 0x8, 0xdd, 0x5, r3}, &(0x7f0000000100)=0x10) [ 942.810669][T23496] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 942.818803][ T26] audit: type=1804 audit(1571315826.331:530): pid=23497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1036/file0/file0" dev="sda1" ino=17297 res=1 12:37:06 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xbf0b0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:06 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x300]}}) [ 942.878920][T23496] FAT-fs (loop3): Filesystem has been set read-only 12:37:06 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xe40c0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000a97952fba0f31c1f"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000000)={0x94, 0x20000000000036, 0x829, 0x0, 0x0, {0x1, 0x1000000, 0x1000000}, [@nested={0xffffffffffffff80, 0x0, [@typed={0x7c, 0x1, @ipv6=@loopback={0x4000000000000}}]}]}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x2a}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x13f, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000, 0x0, 0x20040002}, 0x0) 12:37:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TCSBRKP(r0, 0x5425, 0x100) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() ptrace$peek(0x1, r2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x401}, 0x28, 0x1) 12:37:06 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x500]}}) 12:37:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffcf, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="940000003600290800000000000000000100000080ff00007c00010000040000000000000000000001a6768343a20cc336d5a09f2c0d61c78841d1babb2118e226275e5b3350ff766a2b73d41f4e6865d8884ef738c22220a07a32ec3eaca66e69c5a9c734ed720a39416ecdf92c98a08e973d3793a783c9a01053d07b9a253ddee97760862956f0c9469a2d0c8417ec43318802352dbc93eb2923"], 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/76, 0xffffffffffffffff) 12:37:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0xf9, 0x87, 0x5}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x2cc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x1}, 0x1, 0xffffff7f0e000000, 0x0, 0x2404c004}, 0x4) prctl$PR_SET_ENDIAN(0x14, 0x0) 12:37:06 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xc2000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:06 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x600]}}) 12:37:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) socket(0x0, 0x5, 0x2) socket(0x3f0b54e9b3f46e3c, 0x5, 0x22) 12:37:06 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xec030000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 943.362549][ T26] audit: type=1804 audit(1571315826.881:531): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1443/file0/file0" dev="sda1" ino=17534 res=1 12:37:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x224cbb89, 0xfff, 0x77c, 0x5, 0x6, r3}, &(0x7f0000000080)=0x20) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4, 0x4}}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000380)=[{&(0x7f0000000680)='d', 0x1}], 0x1, 0x4081806) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendfile(r1, r3, 0x0, 0x20020102000007) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200), 0x4) clone(0x2502001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_DIRENT(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="e5826d421d3b29ff427f2564000000"], 0xf) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000180)=""/85) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000340)=0xfffffffffffff830, 0x4) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000240)) fcntl$setstatus(r1, 0x4, 0x2800) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)) 12:37:07 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x700]}}) [ 943.850498][ T26] audit: type=1804 audit(1571315827.371:532): pid=23596 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1444/file0/file0" dev="sda1" ino=16561 res=1 12:37:07 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x900]}}) 12:37:07 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xec130000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:07 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xc3ffffff, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 943.957159][ T26] audit: type=1804 audit(1571315827.421:533): pid=23614 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1038/file0/file0" dev="sda1" ino=16977 res=1 12:37:07 executing program 5: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, {0x6, 0xfe, 0xe0, 0x4, 0x1f, 0x1}}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r4 = gettid() r5 = gettid() sendmmsg$unix(r3, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000000900000000000000010000ab0cab8200", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70}], 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0xdb, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0xffffffff}, r4, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_CONNINFO(r9, 0x6, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) setsockopt$sock_int(r7, 0x1, 0xe, &(0x7f0000000040)=0x7fffffff, 0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGICOUNT(r10, 0x545d, 0x0) r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) write(r12, &(0x7f0000000100)="0d0522291f0fc5f3abef9940de31ef2b7b1128524a45324d475a35a45a8645cd65f0361c8663c7291844fee28ac49a7db50275758cd4d98344590923cd22faed11e2fccd51d9b69ca0ce2fa1a0ac39e6eb957ef19e5eaa210a9205b77c0f1d697f", 0x61) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0xffffff7f0e000000, 0x0, 0xc0}, 0x0) r13 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x4, 0x20080) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) ioctl$UI_SET_LEDBIT(r13, 0x40045569, 0xf) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) 12:37:07 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa00]}}) [ 944.121790][T23620] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 944.160824][T23620] FAT-fs (loop3): Filesystem has been set read-only [ 944.184577][T23623] sock: process `syz-executor.5' is using obsolete setsockopt SO_BSDCOMPAT 12:37:07 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xee020000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 944.291599][T23627] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:07 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xb00]}}) [ 944.345309][T23627] FAT-fs (loop2): Filesystem has been set read-only 12:37:07 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x202103, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x9, 0x0, 0xfffff001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:08 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xc70e0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:08 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc00]}}) 12:37:08 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) 12:37:08 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd00]}}) 12:37:08 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xf40a0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 944.811799][ T26] audit: type=1804 audit(1571315828.331:534): pid=23666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1040/file0/file0" dev="sda1" ino=16977 res=1 12:37:08 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe00]}}) 12:37:08 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xca030000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 945.044376][ C0] net_ratelimit: 84 callbacks suppressed [ 945.044382][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 945.055840][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:37:08 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x18, 0x18, 0x2, [@struct={0xe, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000280)=""/200, 0x32, 0xc8, 0x1}, 0x20) [ 945.085315][ T26] audit: type=1804 audit(1571315828.611:535): pid=23679 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1447/file0/file0" dev="sda1" ino=17121 res=1 12:37:08 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1100]}}) [ 945.134162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 945.139959][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:08 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xf41a0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x4000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x5, 0x7, 0x9}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ec, &(0x7f00000000c0)="e976f85ec1421d15d0deedde03eaa4b66c286b2ec85fd13731ba710f21da63b7faa7b5fdf56c2f5062a7fe64043f1d77400b55e6a9e10ed93e47edbdddf0ec53de59e9cf3c93f8cad6132a39961d2407d5fe18404749201580e44bafc1c690ad800748d617b093cf4200e4ae1dd943d5b30b3d6a1baa9fbd51819ab777836e6e793747fb916d18a2e566a198f1c762aea320") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f00000000c0), &(0x7f0000000080)}, 0x20) bind$rose(r3, &(0x7f0000000180)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @rand_addr, 0x11000000, 0x0, 'lblcr\x00'}, 0x2c) getpid() 12:37:08 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1200]}}) [ 945.335705][ T26] audit: type=1804 audit(1571315828.861:536): pid=23691 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1041/file0/file0" dev="sda1" ino=17550 res=1 12:37:09 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xd2060000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 945.454189][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 945.460022][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:09 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2500]}}) 12:37:09 executing program 4: chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='m2\f\x06oo\xeb\x80sents\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x9, 0x7fc) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2000000000, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe22) socket$inet6(0xa, 0x3, 0x1) ioctl(r4, 0x1, &(0x7f00000008c0)="153f6234488dd25d766070de4e3dbaf8d8b755b42fca425d9373e12ee1e0dbd7c64081a40853fa021e1775806d03949168a81cae469ecd296683cc742fba7222c0cb704b78a0d5577a4de69bfd880a9b83722a10aa0573229fd2bea37b7cc60dc8c5d9afc2691d663866068198ec50088d4f29f5be4bd4eec776ead6bacffd94404b7a24d3453b680b4c2528260ad7af8f425f0652fdb4326783a54adb3183fd9367171830bd8a4eff2bad28825c6db3f2d82b37e0cddc8cea4c529a7548c5fe083c1d6d8c241d3646c5dc648205") socketpair$unix(0x1, 0x4416826cd754112e, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000200)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0x9, &(0x7f0000000200)={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, {0x0, @in={{0x2, 0x0, @empty}}}}, &(0x7f00000000c0)=0xb0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x9, &(0x7f0000000200)={r9, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, {0x0, @in={{0x2, 0x4e23, @local}}, 0x0, 0x7}}, &(0x7f00000000c0)=0xfffffffffffffed1) r11 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r12 = fcntl$dupfd(r11, 0x0, r1) ioctl$RTC_WKALM_RD(r12, 0x80287010, &(0x7f00000002c0)) getsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) memfd_create(&(0x7f0000000140)='bridge0\x00\x00\x01\x00', 0x1) write$binfmt_misc(r5, &(0x7f0000000c40)=ANY=[], 0x0) 12:37:09 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xf4ffffff, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:09 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000]}}) [ 945.752847][T23721] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 945.782266][T23732] bridge0: port 3(gretap0) entered blocking state [ 945.806882][T23732] bridge0: port 3(gretap0) entered disabled state [ 945.817655][T23721] FAT-fs (loop2): Filesystem has been set read-only 12:37:09 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0xffffffffffffffff, r2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r3) getpeername$netlink(r0, &(0x7f0000000380), &(0x7f00000003c0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x4e24, 0x1, 0x4e20, 0x8000, 0xa, 0x140, 0x20, 0x0, 0x0, r2}, {0x52187d53, 0x6, 0x4, 0x20, 0x79, 0x7fff, 0x2a, 0x1}, {0x1000, 0x7ff, 0x180, 0x6}, 0x7, 0x6e6bb6, 0x0, 0x1, 0x4, 0x2}, {{@in6=@remote, 0x4d4}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x3500, 0x1, 0x3, 0x81, 0x7e4, 0x3f, 0x80}}, 0xe8) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x8}}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_role={'subj_role', 0x3d, '/dev/vbi#\x00'}}, {@uid_gt={'uid>', r2}}]}}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) [ 945.882229][T23734] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 945.891536][T23732] device gretap0 entered promiscuous mode 12:37:09 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5c00]}}) [ 945.930809][T23734] FAT-fs (loop3): Filesystem has been set read-only [ 945.971644][T23732] bridge0: port 3(gretap0) entered blocking state [ 945.978684][T23732] bridge0: port 3(gretap0) entered forwarding state 12:37:09 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xda090000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:09 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xf6090000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:09 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000000)=0x4376) 12:37:09 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}}) [ 946.164171][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 946.169989][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001000000770000f200000000a6ff17b96b1f0d873722b41a1100008f2cd6c862e13f10a5f31a26f4233e3ba1ff40e062a43f88b1baf272a416e63e58afdf284732bd1e1970000000009f313c4957c67a08676517ba1300000000858003ffffffffffffffff3e26b5ca26b5434dbd533925db8b54b33da7b9c7aefca1f9c49c6400000000000000000000000061e2448f23a7e40000000000d5a0a5c33d3cc0b2eeedde5233ac82d4f7de00c26cb542f13b5bc18adcfb59dfb5edff90d0a500a0fafa7af4fea59c878c765f6a084b83a0c37596366d369187f444"], 0x18}}], 0x1, 0x4048000) recvmmsg(r0, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) 12:37:09 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x4, @raw_data="389b90fa7753924b6166bdaa295da7df8a9aa0b0cf1dc1459065283f4f5be3045d63a1fe71377f42597a23bc980ae7dcd974db6090517053dd881f763a443aae876660d24edb6577fe95a81503152b0f6909aa9a55525e0ab552e21e4970b2c387af5dbed5461d6c60385a93137cbcefa110f32013facd1cf04eafba1bea194950476c9bdc91ece03d146e99daf6cfb3afa6176efbeafaf74fa582da13d67c14e5807b859b2e4680eaf736430c067f318a30923cd4f4b91db51673a7381fa29c31059e098bdc552e"}) 12:37:09 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000000]}}) [ 946.363234][T23763] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r3, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21004}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r3, 0x16, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff51}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) [ 946.403175][ T26] audit: type=1804 audit(1571315829.921:537): pid=23775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1043/file0/file0" dev="sda1" ino=17554 res=1 [ 946.422760][T23763] FAT-fs (loop3): Filesystem has been set read-only 12:37:10 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xe20c0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:10 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3000000]}}) 12:37:10 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xfe000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 946.644147][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 946.644185][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:10 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000]}}) 12:37:10 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0xffffffffffffffff, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0xffffffffffffffff, r6) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000200)={0xa0, 0x0, 0x8, {{0x0, 0x3, 0x0, 0x2, 0x0, 0xffffffffffffff2b, {0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x1, 0x0, r11, 0x0, 0x81}}, {0x0, 0x1}}}, 0xa0) pipe(&(0x7f0000000500)) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r12, &(0x7f0000000200)={0xa0, 0x0, 0x8, {{0x0, 0x3, 0x0, 0x2, 0x0, 0xffffffffffffff2b, {0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x1, 0x0, r13, 0x0, 0x81}}, {0x0, 0x1}}}, 0xa0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0200000001000000000000000200e4fd", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="040004000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="3d62f7d4", @ANYRES32=r13, @ANYBLOB="10000400000000002000040000000000"], 0x5c, 0x3) [ 946.792818][T23797] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 946.804912][T23796] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 946.814237][T23797] FAT-fs (loop3): Filesystem has been set read-only [ 946.833006][T23796] FAT-fs (loop2): Filesystem has been set read-only 12:37:10 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5000000]}}) 12:37:10 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000380)=""/127, 0x7f}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:10 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xe5010000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 947.062093][T23825] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 947.080956][T23825] FAT-fs (loop2): Filesystem has been set read-only 12:37:10 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0xfffffffffffffff8) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, "b13e1c20d1764d052a4289a71186ca1abfa7f39eb694f4602948f6585c3542ac42cb2f94b098e98f2bcd6128dab4a71d544e96e01e3a9a3548ee5f554c06d963346edb9d133e86fdd31c21e9aaffeb52f7cd63297b1fd0db1845e12bda3ce00f0cca0e6ac9c42a61e687c24c0553b408359c86c7bfd7a30944ac327f982b011258e85ee00f050c38e73199d07b72b225a96ab0fb5a9ea944a233e46cd4c25aaa0fe04bd9b3203f61a06c8f094563ffa0078e50248ce1acebc03c75069eb1cb20ebbe30ec063f9ebc45290dc4f8b56ebb08d32e4df04785fd385029f766a0b96db6a1b6615de63393fe97082c076a7170d2b1c06ce0627d6acae850c2b95f38b079a352f27bf6f5460078b8e597c1d3bdb5cf9e73f42eec5aea224ab44b94e18e812864faeaf770ba7471f99b07d41d573d1d4c3833fb4410ea36d710bfa66ccdb14a1927a678f873b023e82c341a43704adb37242a67b2a46d02ab7aee23cf3030a2f3dd58eece667b6e9393ee8d36649e37e83b1c73c0ef65b4df6173c1c25324fbb9afa1361dc4275f152deb03d7138a688eb9dc66e7845ce1be5647bf740b0e1dd038120ef1e3e1cf420cf8b723bef771376e433935e4f9096a10c4a969aceaac4791c41f365b274dab49bddf51b22a24c05ceaedcbf45febc927e98f410d38247d7679cee7b0d3041eaebd7821924ad31e7c5137bf87ce1ec537a981779f0a4c57bbbb5c641cfd02e1e3904f48b0be96fc9851b6bc8c4260168eea9d9d111e2777f78a9021d5eb0166e39410bf279656770263ca2fb7ac0e30d5e168f8cf4bc5665d057da939b770568e41d0fcec5d6aac0bf4ae66fb099b786cdce7f6a9bc00b83d8ed72440a9724d4ef8af71c7efbc31397930cdcb99d30502ecbcc7ddb9161ade16a1badbd7ea3c6c65b387b46234c4660c816506a2f76264bba07ecb685532116bd971464b58e3ea0a29c2fa1d49d9c6308806db01326e9a1b6bbb556f6479b29f48718e211d75f08d0fb477ad8dae5aeaad7e176b2c5ae331ef78212e9dd7e506549dc74ffd940dc91d74aee2fa7f28855919c163f443804e2a072ad8add2be84df87e414afcab0f8e6f67d3ebb1778a6798d50233da09d29b95c0da97304b7a025e50a7c89e614c63bc69477bfe0e5ae2c468332d134f9e22b19eb2f01c8e8d5148b9b980f8b9aa0cab9ba89aafe16d6a8cf9cb5ae659d8fba88e2841f3d6ac0c44dd9f03787d357fe31a4f551e247bfb73b1f2aa1e208c36aa90dcfc4da8877967c05fe951716ec2293d79c6083e79061bbe18150e2af1d889bb4e87c7735b0e7b88a3109a906d1bd4bf9b98c2462420ecc4e9f3a274a6678bc56e9aa7f3d64677141f874f35d00d04a1dc83126ccd69a0221305a3a5418ec24e163b165c1e4533c38f3d213de4012aece68ed11e2f42325d6da5eef78ee985f81a7991e3d1ff69188059c292779579418ef81177fa94b43cdd0fbf92d31f0fb592a864ddc98ddd5b49ece865e7c7a6c873169d0eea46c1a44f645b1cfa40849ffb9f5355ab396dc1a875180f17103be63be4e7d1920949c59ba5d47341c176ac307e165b9733ac5cd9e9691f5ecd76b467881b78f217d50903a06c57270f4104fd26d496dd7e08c27209185761882923f6447c73d53a74e28132e6bf97ee4f2df9d03be88653a9a7251d8df247f1a75f91f95886ce317e3c125aa7686eec86708fa72c9b33a664e76c0ed891ff9d840ac121ae3f96d32330a14fd76df19c7ae0434e2103d6e9175da0b6cc7a007a0a18615271771434959de305636cf7fbfdd16239bff7dbc656a702ebd48f9a2b1937cca80604ec525d292bb7337459235ad047c6933b6c81bd966ea60ec863de568a9e6d8e0378916f441e0f8b2b74df49b9b24094fd643413469428a537aed19b72bf9381ebab4cd57400ecad1cf1b792e9610910d02f9a779b009840e3f1a1395a87f1e590c33018be80a3f34bbaf49e415ba7d3858b40788cd19211b8cad3789870fb252f8991d64bff9558a67a2316ec2402c2f9c52de42e6389fc90bc4379f7b899b1a943035d64f20b7766edf08fdfa185d00493031f0d3f9ad7dce841f725c5adcba896a76857918a2f54c8aa2e50f71eda35b8fea3732a02c146201ad9f4b65b7caa09e2a73f72aee1ce428a35489038d5cc859fbd48be8da5d088ccab897a248fe418b89b409ab5507af725f077d264abec5b53667ca06aed03815dd537535a3360a50ca3d09c025b5057362c7cb5a4b99c58ac64fe813f4d7f2cafbc3048835ec43fa68170ec7310342134c9b5ec417763db145555cdd37f24b27b0911d172710b74d3c754aac02b24030166cbf2eccfaf1e909b629b7919db1351cd0167e8b6bddc5ce4b7e13cbf0c095f636427d440d058e7637eb117947fc6a60942d10bd455030ee38fc447fd3e6232efba65def558dcff60274e6b2ad62464b4f767bcfec22c681c12bdabf1fedc3946f45c9a34a9169f79ea60a9d190dcf1ce14957382af602dd134b610b269247f38c3d4e233f2fda399dc4cf09139cff9e9c731f8bf940df3cbdf9355f604bd0f3d3b20a6cfc39a7d9ff74f734750187b30c1a970a432bf7e9417cc87d8dea00c4e1885845e1a59bc6a5487687c5bca514e9dcf372bcdc0fe4a47f3e4ac456b1a812e69f88b2a8a964d946cc102ba6f3a7c965df24653c6384d810cf157c8581d4b40e874aded8d227a25fab9889f02698bf52980f048408de4a96226949eba5d1b7f41fce61ae1ff9388e096646ddda4c222f7b9bffc1d3e5b645b6e248637698f6a5be1dc03ff7aa9f418153beeef9b9d67ac5b6fc888e5adf0db41a6d5cac2b600af3b428a1294f4fdb4cf64ccc254c1c7ef71b9be3afceb797fc9504bc3f3dde217687d47cd445c44bea2b16eacae76f16d868b77065b189bd7c4678f3a5fc99b4d020d42972d010b7a6b22de46b434f2d8ec4f567af2d531817ec81ffa36cc27d073a66d2152f1be2a8dce08e98a00f473f22e680cf0ebdcf37936cee60f99eec69503a15d8e36f8d599b535021693fb52f9dc93e315d6e849bd4bf9d05fb25f0b09de91b73ca4edfbfa04d9262d449eab2be542ea30f316384609efc52ed641a9e32d48e4a57c65e8bfa5c13e769d5402a0b125c17360800bf0da8592a75abe647f1d9b1072942947da82e701308b60ecdcfd40d7b6cf44b443493ef0466790547c0a8e5914484969e52cba3787c41df965f91ed7074cd62a63db7e1c35b8f9ac30521295ae7b9c81143926f1dd36aefdfbcd7056b0d4209cabe113a18c58ecc062df687666725707029a8be3ef5721484bd429bab33fceb76c6a0f079da8819d0d9565f5e4ed45eb531f9501b85b619b5323169b0297b7cedcf6f288225dd5e6a7f52c1b96cd38dd94b2f6b8cfc6dbd7862901a5295dca5ecbae72344f41c4a222bd6711831d265b910d547501116bcfbf3c9e104b446175c4c8a4e56445ca22f9363f0f54858a8eb4a1c43103bca578c5b0ee372efd705a950510dbbfa4f74c8ddb4bbc1f07dd410ebb39c01f4da8a0bad2d3d35df3a12a9fa2daf44c8163d59aba8a7351ecc9fe4cd25b987dba700e73d7174307161adf70db0e7a802d7c9ec1b912ee58b0a35c2c6f40f112d70ab5aa708071379280c9ffbceaf0a4ec45c89ac0bf3ef40538302b685e24574da8bde8654e99eff66c9ad5e6beafa0e48e1c293c53d955980346cbc052d15e5d1f3baed388dfaa72ca089af06ae757466a704b93a0ff13cb5c722f0b872432a4fd4513ed56825b13ddd4d8c02eb624c8358199f52679421ab0e1792869f6b4aea523a1079b3138f1ef761c6df102096eff43ddb23ee668b9cc5161433feb318903b58387c3dae2833a8c770e7c6e27c31a1fca07377fbb07f11911be6192f7518a8d089b89826e48b28f5c8a00784bef9b2f68c90838eb2c9fcaeda4bb76782510082c977a7ecdd5743e9da8f088a3b67a25cfb25db4a709b6cbf5425e7efa8c2e472464606d9ccd2fc0f73cd1d51a5aa19d9caba10be2147f8e1ad763ba45693f9f078b0716cf588142be847ca67dc132c5782fed12b7d95c55a9bcfdfb85cb48698a45621cc2f1c85559617ece7def71486290b0cf8e987e8788e1a13f17e3f24b93ed2009ebe42e3bea9571f98b39b787c107dcada3a36fa1fe93736e74ec34af80a182cf0adf2846577f1d474c9ff1b4b8a2cfe6a2d445029ca77088b9c84be63655d48cbc5f61b18d7cda0d141f2db6bc3c479aa6ca19638e2c37da38768eb8820e5679345d2abe8033318eb952e297e17dacaaee3df7ef1d6cd554e9b1b453c44e3d4e030e25c5f9ed094100f6d9b1dc5dab371436ab252cc4d7fdf8fe4b7f36ab71f2bbe3878217b151664c3b9ae970e473ae164d77f294ca8ad58634ea446880e8327fc7af2a088e39508443a601eaa00742a7d0ad459dcac24a60edcfa6ac9f72f428c2b8dd30b8278e28f25a1a129d23cacd765de4c4aa52819578951bb8e311e8621f627e3463e2562b6dbc8d1c431c240f1424599438b9c94723f79ffd1fa1bc94104e4598bd43244302f86ddbe47ad8671e25f406aa507ba45bdba09841827a697cece002f79ec7cf14488789d754f84818d180bd04a11cb2115441a402bea2be749ef233bcd26ca27df828ada877a893e54ea3e6ea29e62d6e7693af7cbee59ccdb4045d0e6eeec3d8f59205f324a5f7cf5f871929c83ada04bc5d3990288dca5eb312339933ffb1031e05866e1b2d0aad0ca940795458b7d6c8a3750a76e1e6c8ccd48ca542d6c51164431d70c9d35f0f828cdec404a175a44bc2a9651ec5281c0f3aee9e4375f0eb139f58fa4419fddf9ebe2f8f37121a57397e7e830ac097ed375521a68f7cdc471621b769fef40cd19d8d55a82e27bf5b0cc4182359db7c9066e2ee10df279a89e96fcfea225995f065f7f286b8c8ef9b6c82a34df14dda2f737f557578ce5b15944e3149110102d80465c1b436b6bbb16fdc64a9d130ec7644bc162f0e2c5669a9254970a062561e269d85b72b4748d71d88ca20778287bc3b9613043166862f133f366f6361b9e1d040bbcd9728a70fcf3be7ea8fe0f55980ed03f336ec49f7cb6899813acf47d3b2413e7b637b764fcb9003ece75f8a255b9cdc71f80dbbaa7eaa2111b5551feeb7ea31620a2c88897538915abedcd184d57c79d81505985f561820449c330bc3412bffb68c4c743c5a5a3acafcf00d7561a66f70e5835da530ba62f221211e1fefdc1fbc8c05b1b68b7eb2afac6ebbbc0b961b8ef8b27b555ce7641f6601ac19d5f4adb06b40155a2085ff32de5b2c5edd96a01a14d1bb49b58f1fd718bec428043819b8070e46f0215d2153318320754638d9b40a5214784e7c1f80dde05500cfe8e4dff855504e099634fb3d44829453cf4ac8db7e5a4144f96d4508de90ada04240637fd5b261cfbb80c8d9ccdea6c1d3485a85663cff9749133002c7f9c6ea4de1b50fe90dae397f6b5833e943e6c5f60e10d805e97e6869488b857b44d8c94276f668257c223e2e26dff75222d3f304f8a040ce058e1b7b3bc5f0b69c310beea64212ef0a54bc9fb858c25681cee574c532b64d4f8241e0b855f7f79d0a1ea22fc3d9ad5a1658b5c4d9d417e9eae47c81628341172609a8ef8c72fb6e4e48da6a10207e56b727f65c82d49e2dbb44b492e1265c2b28f98980334ccc3abb0cfd15d73c2f38f4c824022aa7a0ac0b7d35eea934d3455d21e8c710474e54bdf29be107ebc00", 0xa943708f26830065}, 0x1006) 12:37:10 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xfe100000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:10 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6000000]}}) 12:37:10 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xea0f0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:10 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @raw_data="447954517e16ea91ff33b6b0bba39e411d51c284f8189a09e8be4559527fb11319a2b70233e5abf4080bee12492a4662676ab611d0919cecc1548a59478e2f84de85f1a4a7fafcd24aab661f51c7bc6a8b30b03bdd422dd0f25de545c970c222115a76eccba487f3b7ca61372014337b1d20b31b5d2ec3f4f2d916a81c94c85c877d9b09a71fff5101aaf102164dc5a369d5c6f43e610dcdb357948f45f71fa58f69ecd12adf11c19087177d3361d004501ef0eac25133bfb6ab80ba7b852a6e5a247f0aee10556d"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000c00)=0xe8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r17, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) r18 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r18, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r22, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r19, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r22, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000002b00)={'team0\x00', r22}) r24 = socket$netlink(0x10, 0x3, 0x0) r25 = socket$netlink(0x10, 0x3, 0x0) r26 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r26, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r26, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r25, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r27, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r24, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r27, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002b40)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002c40)=0xe8) getsockname$packet(r0, &(0x7f0000002f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002f40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003040)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000003140)=0xe8) sendmmsg$inet(r3, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="03cac08a16a9e99926c01e01a09b1a9226e39614513ccea6fd781316b7c124f736c8150381347be235b8b06064c7b4e74feeb4811b7130ed321524c661deaec66b596e8aa4369e1ba6e7d2dd8a1a", 0x4e}, {&(0x7f00000002c0)="ba7548f1246679506dd333db270391a5fb7c7fc3fc2e1ef07589d5b7943cb0cca335e41c6a62f7b7e9cf01c41c5e2a58c1b404d5a09988423c5f15f9d452869226a56de2ab98a891eddae5f79c0048b46442d161064feecd76ad6dc9b93fa0ef0231f0dae0bc96d735d106c80f008f6f27f73d601c8fab0d136ae53ecec411723d7505291de88bc227db346366f23b6a1912169efc50db9ce08018bf0ac718ae7b9c00419f9d541a12c633c6aaa51eaf6bd4b704b9db27dcef0dc2d2a4cbbbf3fad222eea78f", 0xc6}, {&(0x7f0000000140)="2f03bc3137a9a4e83c5a89137ff03e355e46f8e4", 0x14}, {&(0x7f00000003c0)="ae8e29a9b5cbf343e0c69597d9e6aa8dc5cb1fb8376c87150fea12eb192c5316f118aeea884596ed68536c995beae1f86742063bd1d2909b44d49923ce056f9deed5dfb8a4482dabb20f092c6a5f4a7940d00084a057d9b3bd19e9e3a8c99c7c42e20363ce8634b52ae235fbf85013d571417e754e118f5c4a13b3eb488d0e1f39a2cb0afbece3", 0x87}, {&(0x7f0000000480)="e357d704e4999eb7bc53b8a8d2c024df1a982edb7d800f2d68658497086c835b24d94e3085c63a62170ce9c71d0cb7129166a2eac7dcb4533d0f4d049f6b71688b370510b307287d5f", 0x49}, {&(0x7f0000000500)="3e74e9f7cf7de1b175305beab181b811e25e37e9e15fef20acba6cea8eb57af299353053ac385246fdda20a1c38cbabcec31687dbe8ab9046fd48a10d54884aff5a35cd5d66d0f4dbb300bc06a801782669a8007fbf3a0672f1ed77b2e58d4216b560c6af307b4ed11c58e7c94420978d008af5a8c5a48c53c38b2f1561334877ee55c1374d0e151af392dc2ec71b58d8aeed7847bc8926f35f5ebcc863902e92d1c8708", 0xa4}, {&(0x7f00000005c0)="6716ce4aba33a2dbc861fd307eeedaeeda330a9bb865c7391adc585fbb01779487d087ce82d327b5b060bb8f25a336f659343e34140208fe0dd945cb9954f82bd5c3ac6ca845c3a591580be69c092d67eb9f2b1f86b4435e3cd11518df314576a5ffb53818584042977b7445efbfdf7d70219d27994bce11631ef6c91c28af240192e9307213ac9d06b4c11064b6132b8db016ec363fbfdc9658cdb1813cc852d1b2ea708b5275e6d9ca086a909c80122efd2605c3c4235c3e5e55a743da9fbf5c5a29f0fa69d5e75c1e80860f26243f5d91f902", 0xd4}, {&(0x7f00000006c0)="c2fab60567f55370af914ceac6dc9b0cde27ca5eacf2ab4db68bdf74054d7a23dd3da39ad9ea7094f4e586260e9ab60f7e98d7956ff3a2c83ab65f7e1051f504756c64a6d1caa1bde05e7821df7b710a1066c68e6768e76cd6df001058cf07747f8f631ed579094b0093d576213778d18f32c2042800954c493faa35edea1d94d534eea31e9a8851bb760bd8cdea91b02f4212b75ffb3709495b3f9d6cf56c10e91457a0535f88ee", 0xa8}], 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="9c0000e5ffffff000000000008000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000007000000000000000000000000700000000442c4063e00000020000800100000004ac1414240000000200000007e000000200000001000007ff0000000000940600000041861500000fff000f318c1f74d4c28507110e4be6d0820f5a3dafdfcae7026090b5216690890720ac1e0001011100000000000000000000000100"/148], 0xa8}}, {{&(0x7f0000000d00)={0x2, 0x4e23, @rand_addr=0x6}, 0x10, &(0x7f0000002100)=[{&(0x7f0000000d40)="4c39ac592bf06487cb0224fb0f356fcdba8dc2e5dc5e05b13a7d02696e5d3aaf63efc47953ac666f42786a605af5eae6d42a3e834c50d0a401d7ab14b830baeea99eb2ee4fac5c7290b50b03a3c77312f8bf2911f5c00cb4", 0x58}, {&(0x7f0000000dc0)="dbaea26363ec2f6864154a2bfde957", 0xf}, {&(0x7f0000000e00)="682364523ee7438aecf833a76f40aa3b97f7ef84f00431fcdeabe4b8f34cdb1cf0a3385361cdb9406bfe648204da59bb4de050caa81a9453b94fe6c242a8b6b599116d3eecf0103571ba57c124a1ce04199fcc88423331a110531c3ebf6f5513755fa2014075d2f346fbfd8d085b4042552c6daf00fc9cd354965e0d759304ee159d26a6e44ba87678c1d832715d46b7465bb83b9313fa9e9ed9dc0f5b8ea3dcb760dc60316dd627f329ea72c463882546afa38a4f4524a91c04ff9e2eb732a7", 0xc0}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)="aefbc25c6e9fadbd1c2e1c81ba65f7b7d94e9b65bd0c6ef3b60ddf865e9091ae9169e574ff1855f21587d2f5d5ba7b490d03e80255a9fba00ca6b2c64d5ebd758831f2b6190b33f88727052659afdf6d8640d390345242a39749a9a36d72da45655040fad6271c7b00973426d6ad189de5e949f4fd4a4ddeaac03781e7eede105270d5ca79713aebc152007a", 0x8c}, {&(0x7f0000000fc0)="6ed2e9d617a34847abbd9f4d97e3944c279f7d395a4f777dba9e6558b712d9e666b4032d50d8a2a793e1207f1e1d2fd7d567fc3a6617e0cf", 0x38}, {&(0x7f0000001000)="78ecb1db582c375f1b6ce78ae838aaca0ae78c455b08e8bc24a5ebea5b415fd2b186422a57ec683064a309b459c7c418db681634a80b8a7c4b16425b63d15da0f7bd9b3008d44f5733586961bf28ddf2fdcba604edf4fabfecdeb8b28b8732146637d3973cead982ce6d40013d51014bf69faf637c60266b089a3dd2ac640e6ae061293c2336c8359761f9927594537c11ecfa83ed62b9d71177910cfd575bc804984c0b24c89512acb38a8b32201ec80b461f96d72a93a5f6fe11c45a288d4d249a6d175642269c", 0xc8}, {&(0x7f0000001100)="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", 0x1000}], 0x8, &(0x7f0000002180)}}, {{&(0x7f00000021c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002400)=[{&(0x7f0000002200)="47410823440e94", 0x7}, {&(0x7f0000002240)="f5f329f7e82a9b32dcf3e8d4010aee48bddfc35ce0d660f1547785a565e0ce603c7d1f2abb959954e5b24e54951d30b629b91504264494e82c58fa8b03fe72fdfa89c214bfbdbde19ee1b048842a9724fdf22b3878ea7a7c604f2684193bf317e5be23602d32b5d2982fdcc2344be5cbbbaf95d8b6f8445b9571bdbe043395c4f57d07b3b7817a6656462f5a114403c366f78fb115ad8b62ae1612d7bb41f96768d9286c816df3a517212b497ddda14b007026eaa3f0c3c1a987d4633e437bb38d9c98499a54988a1c5e2b092b27bd466879046b936724ff78cfaaaff4d078437ce92da4b457e76f5bd7e934c1de1edc9e65d3a33b", 0xf5}, {&(0x7f0000002340)="c94bb92492ee1194e0d099c94805c2f1bf66c575faa117668f0e70bbf6363d1a18e2cb0bd28af55c4207898b0c58ffef6ead04e8df008bddcc1b3106e78b741dd9ac4074f1491464e3fd74b28fcf7d03fcc493d92243ef31bd189045e8342005ae6947c46d6261d07eb14523686e329856256ad6e623739191c087023835441a3001ccba8ac0fec451b4cbd7c8ca967605a72522670989c02db2a16b26cf9e9bf21c", 0xa2}], 0x3, &(0x7f0000002440)=[@ip_retopts={{0x104, 0x0, 0x7, {[@generic={0x44, 0x6, "415eac33"}, @ssrr={0x89, 0xf, 0x3, [@empty, @broadcast, @loopback]}, @generic={0x0, 0x12, "6943e52aaf4d443b9f238c73337db275"}, @timestamp={0x44, 0x38, 0x1f, 0x3, 0x6, [{[], 0xfffff5b6}, {[@local], 0xa7a2}, {[], 0xfff}, {[@multicast2], 0x709}, {[@local], 0x7}, {}, {[@local], 0xda}, {[@multicast1], 0x1f}]}, @generic={0x86, 0x2}, @cipso={0x86, 0x6c, 0x3, [{0x6, 0x12, "53c927a09d7e27e1bbefb0fd062080e2"}, {0x6, 0x8, "35d0b8bfacb9"}, {0x7, 0x12, "3fea39e425e610796f8366fcf9963d49"}, {0x1, 0xf, "25fac9608610dccad0b7b584af"}, {0x1, 0xf, "2acc7f5662d8ba76287e66b9f2"}, {0x2, 0xb, "2821d907844aefc660"}, {0x0, 0x9, "8bfe4fe78c5754"}, {0x1, 0x8, "e47e22e5f13c"}]}, @ra={0x94, 0x6, 0x4}, @end, @generic={0x68, 0x12, "b73f3d510de16b29c171d7a6f62ccde8"}, @lsrr={0x83, 0xb, 0x1, [@empty, @rand_addr=0x4d3]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @multicast2, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @broadcast, @multicast1}}}], 0x198}}, {{&(0x7f0000002600)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002640)="852789b75c1e3e574be6c3276bee87d613cbb4621207f5345ca66912709f10a76178ae230120d61696761a7ffbb0cbbbd57928d3a1ef7a93bbce66410cf31107494de5be68300a69a22ce1607f6635994487a079458a62d577a5bf027e6fdda5246af0e5e1c66752da11f91e049e49863435a38ffaa50343d8ad6458669255be", 0x80}], 0x1, &(0x7f0000002700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002740)="068385d5bdea8181cd949576d1035a11de83d9da5dca36468ea6666b94a4e5a03d1f9cdcd4f7d9a0d1a730", 0x2b}, {&(0x7f0000002780)="41e3101188cfe4d5d1fe1814a0541e5df3f86bd6f9bfc349571551e92ada93d7769f8c1a18fbba2ed1cbc8e48c11655388f6bca40908673c4625cb141ddbcdaa021d0707a53d81800ada9e197a91c38634a29154124e591444addc8750804bd7be2e921090616696c037d8734ddad1084c11da5b85f136cb142b65eb293aadbc41cef25ea62b71d6c0c5b7", 0x8b}, {&(0x7f0000002840)="d0493c164adfbbd27956fa1db5265b2a0eaaa9786717f6a08ae91dba9bffa7645a967ac245fdb9191ce30589e832c75b5179", 0x32}, {&(0x7f0000002880)="3d7923834763358427e3de279513aaf82a9cc70a98d1484f83657835a90c2340ba9b137c71dd927f8f3823e1a494a9999a87c22b7fa50b283d65941408ac2b379a8a7ee29d8f3b24a67804fbdf523c96720d01d3d7bcc818a652a5085e7543cff40b497ad5555e3caf8de875723deaa819746a8be148666750d6fe147102ea4bd33b155ed921d53a57628e5da7234dbf129befb1f460f50f9b433b6535ee39382c27ae72fbbd69a3ee", 0xa9}, {&(0x7f0000002940)="e0aa47c7c14c6a09934fe21fed70f31bcc9a3518bb277d59c235f7ccc134c322c35f29bfbee75a9ab5dd26ec39a38fdf9f3c6f96d007458ad6743974010d1f517a99314e7ae2ab029cf013eff7a61176cb368a69a676683c1e04dba07ea9e2db4c29198b7fb7a1f72536dec840f64a2034", 0x71}, {&(0x7f00000029c0)="4278828673c8dbb1f2b046d9b50f42bc84413b8cc2fb3f67f735f7266013714ebe0578a80c450d5e034e5eb319a6f6b16bd02d0ddd42937ffd53dc5c6271a7fb1619bcb9415321d27556a99e148a7bc754c9c934fb5623f2d2255eebd0831b6d82f4d235c128d70ccebc6aa3f9123f0ae8af100d3779f37d6b5a911a9e8b345f48e180c582f2790aafef6198592e5a0f31ebebf8ca110e52cec9b4fbe7803761dfbc0698db5f17c7acfed547a4c357d922c4", 0xb2}], 0x6, &(0x7f0000002c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r23, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r27, @multicast1, @rand_addr=0x8}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb7b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r28, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xf0}}, {{&(0x7f0000002d80)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000002dc0)="7331404acebf0c446fc576f9dd3facd0f2334f12058cbfa06bf038e1b5824498e8a9185d419e86f72698cc317ee7b88159b629", 0x33}, {&(0x7f0000002e00)="d8e40e0ceff76b8604fe01b1a254b8165f2d6a", 0x13}], 0x2}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002e80)="6fa83a465b89bb225ef4d2b08075d51475f7372d059f1b5f1518151bbbbc7bff62e49a6567237fca5356ec7ef56eda3e2c", 0x31}], 0x1, &(0x7f0000003180)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r29, @broadcast, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r30, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x6, 0x1}, @generic={0x44, 0x9, "2dce82c5431a52"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0xc0}}], 0x7, 0x4011) r31 = openat$cgroup_ro(r0, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r31, 0x400445a0, &(0x7f0000000080)=0x7) 12:37:10 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7000000]}}) [ 947.280628][T23842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 947.400634][T23843] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 947.413275][ T26] audit: type=1804 audit(1571315830.931:538): pid=23848 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1452/file0/file0" dev="sda1" ino=17557 res=1 12:37:11 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xfeffffff, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:11 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8000000]}}) [ 947.476318][T23853] batman_adv: batadv0: Adding interface: veth143 [ 947.482699][T23853] batman_adv: batadv0: The MTU of interface veth143 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.509988][T23843] FAT-fs (loop2): Filesystem has been set read-only [ 947.558078][T23853] batman_adv: batadv0: Interface activated: veth143 [ 947.568828][T23858] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 12:37:11 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xed040000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:11 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9000000]}}) [ 947.660028][T23842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 947.681118][T23855] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 947.810126][T23853] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 12:37:11 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa000000]}}) [ 947.866894][T23873] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 947.886744][T23873] FAT-fs (loop2): Filesystem has been set read-only 12:37:11 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xf5070000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 947.968202][ T26] audit: type=1804 audit(1571315831.491:539): pid=23877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1453/file0" dev="sda1" ino=17556 res=1 [ 948.238750][T23892] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 948.279889][T23892] FAT-fs (loop2): Filesystem has been set read-only 12:37:13 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000514ff4), 0xc) 12:37:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x7, @output={0x0, 0x0, {}, 0x0, 0x40}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 12:37:13 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xff0f0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:13 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xb000000]}}) 12:37:13 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xf60f0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x1}, 0x0, 0x0, &(0x7f0000000140)={0x3, 0x8, 0x1, 0x6}, &(0x7f00000001c0)=0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0xd}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r2, 0x10, &(0x7f0000000540)={&(0x7f0000000080)=""/112, 0x70, r3}}, 0x10) 12:37:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0xffffff7f0e000000, 0x0, 0x4000000}, 0x0) 12:37:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) recvmmsg(0xffffffffffffffff, &(0x7f0000004000)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/131, 0x83}], 0x1, &(0x7f00000002c0)=""/60, 0x3c}, 0x10001}, {{&(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/117, 0x75}, {&(0x7f0000000400)=""/38, 0x26}, {&(0x7f0000000440)=""/142, 0x8e}, {&(0x7f0000000500)=""/236, 0xec}, {&(0x7f0000000600)=""/239, 0xef}], 0x5, &(0x7f0000000780)=""/191, 0xbf}, 0x8}, {{&(0x7f0000000840)=@x25, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/72, 0x48}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000980)=""/213, 0xd5}, {&(0x7f0000000a80)=""/27, 0x1b}, {&(0x7f0000000ac0)=""/76, 0x4c}, {&(0x7f0000000b40)=""/58, 0x3a}, {&(0x7f0000000b80)=""/21, 0x15}], 0x7}, 0x81}, {{&(0x7f0000000c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000cc0)=""/19, 0x13}, {&(0x7f0000000d00)=""/196, 0xc4}, {&(0x7f0000000e00)=""/205, 0xcd}, {&(0x7f0000000f00)=""/106, 0x6a}, {&(0x7f0000000f80)=""/14, 0xe}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x6, &(0x7f0000002040)=""/146, 0x92}, 0x8001}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002100)=""/153, 0x99}, {&(0x7f00000021c0)=""/51, 0x33}, {&(0x7f0000002200)=""/52, 0x34}, {&(0x7f0000002240)=""/26, 0x1a}, {&(0x7f0000002280)=""/142, 0x8e}, {&(0x7f0000002340)=""/159, 0x9f}, {&(0x7f0000002400)=""/176, 0xb0}, {&(0x7f00000024c0)=""/62, 0x3e}], 0x8, &(0x7f0000002580)=""/1, 0x1}, 0x1}, {{&(0x7f00000025c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002640)=""/193, 0xc1}, {&(0x7f0000002740)=""/146, 0x92}], 0x2, &(0x7f0000002840)=""/239, 0xef}, 0xfff}, {{&(0x7f0000002940)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000029c0)=""/49, 0x31}, {&(0x7f0000002a00)=""/22, 0x16}], 0x2, &(0x7f0000002a80)=""/112, 0x70}, 0x30000000}, {{&(0x7f0000002b00)=@sco, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/93, 0x5d}, {&(0x7f0000003c00)=""/30, 0x1e}, {&(0x7f0000003c40)=""/161, 0xa1}], 0x4}, 0x9}, {{&(0x7f0000003d40)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003dc0)=""/63, 0x3f}, {&(0x7f0000003e00)=""/242, 0xf2}, {&(0x7f0000003f00)=""/114, 0x72}], 0x3, &(0x7f0000003fc0)=""/22, 0x16}, 0x1f}], 0x9, 0x40002001, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000004240), &(0x7f0000004280)=0x4) [ 950.324379][ C1] net_ratelimit: 19 callbacks suppressed [ 950.324385][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 950.336397][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:13 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc000000]}}) 12:37:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x1bd, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/ip_vs\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) semget(0x3, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') socket$inet6_udp(0xa, 0x2, 0x0) 12:37:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 950.506975][ T26] audit: type=1804 audit(1571315834.031:540): pid=23918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1454/file0/file0" dev="sda1" ino=17649 res=1 12:37:14 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r1 = syz_open_pts(0xffffffffffffffff, 0x800) r2 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x7, 0x10800) splice(r0, &(0x7f0000000100), r2, &(0x7f0000000180), 0x6, 0x8) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) getsockname$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000300), &(0x7f0000000340)=0x4) openat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) 12:37:14 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xfd0a0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:14 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xffffff7f, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:14 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xd000000]}}) [ 950.639827][T23940] netlink: zone id is out of range [ 950.645736][T23940] netlink: del zone limit has 4 unknown bytes 12:37:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x1, 0x8, 0x5, 0x1, 0x0, 0x1, 0x900, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100, 0x0, @perf_config_ext={0x5, 0xffffffff}, 0x19001, 0x1, 0x7cb0, 0x8, 0xfffffffffffff976, 0x4, 0x2}, r4, 0x2, r2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1) r6 = accept4(r1, &(0x7f0000000080)=@rc, &(0x7f0000000480)=0x80, 0x180000) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000004c0)=""/92, &(0x7f0000000540)=0x5c) r7 = accept$netrom(r2, &(0x7f0000000400)={{0x3, @null}, [@default, @remote, @netrom, @bcast, @netrom, @rose, @remote, @rose]}, &(0x7f0000000000)=0xffffff46) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000340)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCCONS(r9, 0x541d) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000100)=""/86, &(0x7f0000000300)=0x56) [ 950.804167][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 950.804506][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 950.809992][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 950.816154][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 950.856874][T23950] netlink: zone id is out of range [ 950.862030][T23950] netlink: del zone limit has 4 unknown bytes 12:37:14 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe000000]}}) [ 950.922296][T23954] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 950.938030][T23954] FAT-fs (loop2): Filesystem has been set read-only 12:37:14 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:14 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x10000000]}}) 12:37:14 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xff0f0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) [ 951.111712][ T26] audit: type=1804 audit(1571315834.631:541): pid=23974 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1455/file0/file0" dev="sda1" ino=16545 res=1 [ 951.360952][ T26] audit: type=1804 audit(1571315834.881:542): pid=23991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1051/file0/file0" dev="sda1" ino=16577 res=1 12:37:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80804537, 0x0) 12:37:14 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x11000000]}}) 12:37:14 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {}, 0x0, 0x5}}) 12:37:14 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xffffffc3, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:14 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sync_file_range(r0, 0xfffffffffffffff8, 0x4, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400280, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x7f) 12:37:14 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xffff1f00, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:15 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x12000000]}}) [ 951.561588][T23997] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 951.584464][T23997] FAT-fs (loop3): Filesystem has been set read-only 12:37:15 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) 12:37:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[]}, 0x1, 0xffffff7f0e000000}, 0x8880) [ 951.610160][T23996] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 951.662908][T23996] FAT-fs (loop2): Filesystem has been set read-only 12:37:15 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x25000000]}}) 12:37:15 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xffffff0f, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:15 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xfffffff4, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x1bd, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/ip_vs\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) semget(0x3, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='mem\x00\x00\x00\x00\xa9\xc8\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_genetlink_get_family_id$team(0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) 12:37:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x9, 0x1, 0x41, r2, 0x1ff, [], 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x3c) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:15 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000]}}) 12:37:15 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) fsmount(r0, 0x0, 0x8) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:15 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5c000000]}}) 12:37:15 executing program 0: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79}) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="5f7d527cfdbff653aa9a29f36d45f9c210c6ccca704152406bec2d08272435681779b11cdf2d93ed03795ecf89d42717578686ac0bb9cdbab6823ff9286b5c98dcc8143fb8abe5ff1422a32748251c9b49aab270beae8cf5b7c5f4f75512fa51f22a14e57ad49a49172ea3bc25ac313f03710c123449b882e95d2bf5554289fe54b2ec", 0x83, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt(r7, 0x0, 0x7fffffff, 0xfffffffffffffffd, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) renameat(r4, &(0x7f0000000380)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00') add_key$keyring(0x0, &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) [ 952.136292][ T26] audit: type=1804 audit(1571315835.661:543): pid=24052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1457/file0/file0" dev="sda1" ino=16865 res=1 12:37:15 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9000040}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5900bf4d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/Bev\x0fvbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRESOCT, @ANYRES16], @ANYBLOB="c2563bdee2754be0095b7760fec1f35ae98174e84f65612a663169594b876b97403a31"], @ANYRESDEC, @ANYRES16=r0, @ANYRESDEC=r3, @ANYBLOB="6ae9f499d36f2580fb8bf4984c6e407868cdad8cf7a4b47e942c76f8e57d04b07b50cbd0e2f612d2c5b8d694880503b05de7b21b8d5bb9ec1e508fe93f16cccc7444994ca34b5d88ecb04526e27b45108704468abd1c1df13ee899326a047a145e285c654f7552aa7cebd5960a2cf160a7e6bd62a4860cd01a1c5e038f7a3166f62ca6e9e5f9653ccf34fb062312fd151b4a98bd50819557ea77142a558e646694528068513f8719aa52f79dbc01254d1bba91e006738b7c0b72d0ef69af951de22229842194b9ffd67f20d25f068eabb79fdfab8dff1aed858aff47f1ef8ab0a31631450d5a6853fda23c1b3e4c1e6b776a62f5", @ANYRESDEC=r0, @ANYBLOB="01a58f1f394f384f314bb5034280af105de47cdf62ecfba84da7f0ac42415b050c67334b784b24a0f5e83406196978c8ce4740182e54c5ef3a5351ca9832afaacfbc3baf6dfb0c94c13ab11d4956c15c2924ac0872e150cc0fd9f9a2da60a32cf421b4866c2c8b1d3803106f2719f89f46a72e163da37ce678325d966549"], 0x7}, 0x1, 0xffffff7f0e000000, 0x0, 0x4}, 0x80) 12:37:15 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xffffffc3, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:15 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xfffffffe, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 952.301997][ T26] audit: type=1804 audit(1571315835.691:544): pid=24051 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1053/file0/file0" dev="sda1" ino=16562 res=1 12:37:15 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000)) 12:37:16 executing program 4: pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 12:37:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRES16, @ANYRESHEX=r1, @ANYBLOB="1a2b7062e6048282f81f6e1f1112fd846055f86c567317d88569bf55637a0e8f640b4563a1d2207e77ef44d651943b38bb1507e94d82129b895f730e169b53f740bc718943d8b0017e45989fd0882fd958bf790ff1e37419eaf85ba36d891e5c8e912c7651c7d1b6658a0886b4969debc4325d69ca436aedc0d51b0bcdd83e4ec37597e4d541c0b14eeba04c3e1d2a9d499d3e2032345c033ef9232f1228010de405d53d24de19fec15261ff866433f760d87df6bae54122733e3761", @ANYRES64=r1, @ANYRESDEC, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="c99f918d022caafb5e94625b34c9a8b452691d09a08cc5d5c27b186abac114cc34e037c88232e752c7636d68966a651e318a16db1d53d2736dd82fb6acc88cb38313d44ecaa4d733f904852ffc49f54e7f06c0efe084201eb504bc4362b930887d23005d539d8700485f724ff27ef7387d2a19a94c0cfd964a9050cfac824d65d027", @ANYRESOCT=r0, @ANYBLOB="87cbd5ef0e580af5deecb244c1c3bf03496997ab50ce0d066ccc4e4405bbe07a6f98d0e51477ce47fbe81625a259323435f2d0c6d067f40ac4a0191df48df2f3419dd49348d3ca57a5edddde7ce364c1387d708352634e487ba992663a04495c7aacb9ffdaf9b40e6b28dfba644bfd46115a370761022ddda1ad2280f5ae24d2eb45eb34ee326c4a1d926e887814bc71e8cd3549390a46df7cdb792005e10368365245024462934c7626ea6c593b88a0f046", @ANYRES32, @ANYRES32=r3, @ANYRESOCT=r1, @ANYRES64=r4, @ANYBLOB="47293cb938677d87eafe41302c0bc92501b466a8ebe2d291999e4cfdc1e2d3874a0d9d8da9385205c4844546fd5babb370a3cab474ab05f704377026ce8fe891afdb982462ea86ef296d52106851616910178c918e001edf169dcc3cac2a3fe80994a83b7bbe1e0b5010fb163ed59ca1fb76fc5b5e103e9acbec52c0fb8727a0b5c32edda90aed9ad24ff2", @ANYRESDEC=r5], @ANYPTR=&(0x7f00000014c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES64, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES16=r6, @ANYRES16, @ANYBLOB="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", @ANYRESDEC=r7, @ANYBLOB="1d32411285362bd0a359773c10f01f3eb0992f3075acc800fbb14d05f5e5818154a280ada751efacb74bfac7a815d343cfc99bd0cd58de89f31300d754bf31ab94d50d675b0e638f3ca0c8ed8698acaf11f3d504f640ab6ec41d4019966ad22b0533998da6091e0cf638"], @ANYBLOB="56ec6138d9f5a300e9c3e961a03d8dce1e640e6c79a96d9d442f2e7cf0bc46ce085902c4ada1ebe0a844e85189a0dff0ff54215ca02e26ffd3e7523a65da5e924e0770e8442fbcac3d16bd26d2e68284ff4f44ab8a1b78d0c59d6d62d636e2a8712d17aba141f84a77c9fa8c15d1d05c0fbb34013a2aee85b4f80de386b939b9", @ANYBLOB="4ebd18a380dce5b37074a39d1d6b97fd27e7826fec3dd3284b7df785cfaa13092c9cc2a709ad19fdcf2a2167ee89907b09b93bf55f05fa90ceca515f277deeab0eca317dcacf2bbf2fef66610709d276c4a1cad3fe736ea2eca00e4e569f1116b03518b58a261ade989c936c5e6f277ffebffe7d6a8a7ed206a902a01f0b6d968bfcfb514dcb946c5ebe7b9a392b898feb4f943b38b2a34feafc41d2d0a1682c03f8ccf935"], @ANYRESOCT=0x0, @ANYRES64], 0x9}, 0x1, 0xffffff7f0e000000}, 0x2400808c) 12:37:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:16 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x8, @output}) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x100, 0x7, @name="162e3ec108a4651e7aa794955c0126fb5315056997b3100f30947f030ab0d6ad"}) [ 952.573716][T24083] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 952.604409][T24083] FAT-fs (loop2): Filesystem has been set read-only 12:37:16 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x10000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x19) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000080)={0x65, 0x7, 0x4, 0x820, {0x0, 0x7530}, {0x4c2794dcdbc5665e, 0x1, 0x0, 0x7, 0x1f, 0x1, "ad114bd7"}, 0x2a3, 0x2, @planes=&(0x7f0000000000)={0xfffffff7, 0x3, @fd, 0xfffffff7}, 0x4}) 12:37:16 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {}, 0x0, 0xfffffffc}}) 12:37:16 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x10000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:16 executing program 4: pipe(&(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000004940)={0x3f0000000}) pipe(0x0) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)={0x14, 0x17, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 12:37:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000080)="ea8dbdaf19c61972d24fa0d829499944f1c0f944ab10c2d0e369c874111ce9c42fa54c41d5d8eb19691058679a3530fc6b3728a0731a2e1a3040ab59572405b1606846ab5348b1a35f59130e7a2b1c695a7f1d88e11afdf77fa87cd0dabbf4d98c3cd7121091597007992b19614f081a06e4035e6f154b5a97e7450d9b48035afc9561a58d58805c60e10410f4c6d392a35a6f4b5373") 12:37:16 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r0 = open(&(0x7f0000000100)='./file0\x00', 0xf0c02, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f00000002c0)=""/19, 0x1000000, 0x1800, 0x4}, 0x18) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x1, @raw_data="a2eeccb799f02fd1dcbda77813e9fcdbc6ddb3073b7e7501d2f0cca539533107fd307ca4f5f7ae8bce94fa8a56ac0a50fc4584b0da36fd3b42ca2c3c5d710376191b2666d11dcf153b04fd44bd1219306896132c65cd393b685578029b43c46cde285d0cc6dcf95c5ce1917f88851bf4c6686b95def892af32a0df6b2f541d8ae1040000001303ba361affb93276de92aafac0d37d5e413c26a6f15d03ccfefd72ac6353cf58add6d545bec2ef608e1edead9a771b3187d2f60633fe93a21849055bdf7900"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$cgroup_ro(r5, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RWRITE(r7, &(0x7f0000000180)={0xb, 0x77, 0x2}, 0xb) r8 = fcntl$dupfd(r3, 0x406, r3) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x111080, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x2}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000400)={r11, 0x5, 0xffc1}, 0x8) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r0, 0x80c, r12) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r17, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) bind$xdp(r8, &(0x7f0000000540)={0x2c, 0x0, r17, 0x6, r9}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$PIO_CMAP(r13, 0x4b71, &(0x7f0000000500)={0x1, 0x9, 0x2792483c, 0x0, 0x0, 0xfffffffffffffffa}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x400, 0xc, 0x4, 0x0, {}, {0x4, 0x2, 0x36, 0x80, 0x7d, 0x0, "d8440de1"}, 0x7ff, 0x7, @fd=r8, 0x3}) fremovexattr(r18, &(0x7f0000000000)=@known='trusted.syz\x00') [ 953.005915][ T26] audit: type=1804 audit(1571315836.531:545): pid=24141 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1459/file0/file0" dev="sda1" ino=16561 res=1 12:37:16 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xffffffff000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:16 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x6, 0x40000) setsockopt$inet6_buf(r0, 0x29, 0x56, &(0x7f0000000300)="6fcbbb5e9c8682774850535fb4971a7c05f3c5264fd158b32afeb050a17e8cef6a6014a40a1c1eeb88562ff7d4b2ffeb65658ab75e79e4a365866a5610ab5975bfe40e4e89e88e126531db4e24c7de60945ccc703f5181a3d1fe4188f616ea70b5a1b5c11d64111222fe49d9768e5907a285116a77d01af28f5bc57bdf8b01aff39ec2ad4602d679", 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 12:37:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x10004, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x600, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {}, 0x4000000, 0x800}}) [ 953.125472][ T26] audit: type=1804 audit(1571315836.641:546): pid=24157 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1055/file0/file0" dev="sda1" ino=17041 res=1 12:37:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000f, &(0x7f0000f10000)=0xfffff82d, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x402a00, 0x0) accept(r1, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000180)=0x80) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:16 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x2000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=""/199}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000016c0)=0xfffffffffffffe74) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2608211, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB=',obj_role=/dev/autofs\x00,audit,smackfsdef=\',\x00']) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x240000, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f00000000c0)=0xe16, 0x131) syz_mount_image$reiserfs(&(0x7f0000001680)='reiserfs\x00', &(0x7f0000001700)='./file0\x00', 0x5, 0x4, &(0x7f0000002900)=[{&(0x7f0000001740)="c9e314add64b70f30be1bffd7882d04289aecc46937d082280130e8bb94bd626d8d1933a48e36d24b5e80aeca52ed55bfd6724d21af0b6dd37152663aa5a22b26334e4f6dc00a7b43b59529b4c32017440de599734929d1ec95a54c5b4db9ad26e58dc2c99b75319a9b64d60b8564cbcff2043adcf6f63cad7b543f1e5e7ea4537072e966aee250c0d2876a8e1855a616b3133ac53433b79f3ba4c89e067f9336da964066c70d6734cdfd9a234500fbf593d2c32a9e693", 0xb7, 0x4}, {&(0x7f0000001800)="451fbb22671af7ef83561c808bde86c2f2cf39ae9ca9fefba9484567d0edbefcd02e8380f6ef2981029b3ac42ec33643c1c764cd553829a844d6e4592ed1440f6db0721ca37bf0f9ff6425b10bdaac0fc20a71db42b55f7419513f27f1bad001c3c283f936502da81d264b9fdab45024a189ac4fdf552133b87aefe652e71845389fc833e7b62ba1a5690e760bd45ca99b8e9776c3cfd94af99bb8e69d550e0837aaf78bef3d", 0xa6, 0x4}, {&(0x7f00000018c0)="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", 0x1000, 0x8a}, {&(0x7f00000028c0)="cb2e3f96ffefae655c8b20d970a9397649dd3998305dcf1ae6bea32fbc9b9ee3d85d54f6e4", 0x25, 0x1}], 0x3810800, &(0x7f0000002980)={[{@jdev={'jdev', 0x3d, './file0/../file0'}}, {@grpquota='grpquota'}, {@tails_on='tails=on'}], [{@subj_type={'subj_type', 0x3d, 'keyring'}}, {@subj_role={'subj_role', 0x3d, '/dev/autofs\x00'}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{}, {}]}) r6 = accept$alg(r5, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x99, 0x4, 0x8e, "b77a1894ab7ff73087b8f8f725c96b04", "090006c786c544faa17bbe65a3379aa34ff7777e1d758f59fd0ee47c2532e574bf20b8c8b9e89bbed7a0ca68c74d3ba94ec06143ab2aba6d3a3ef8dd94235ab4e560ab6f59e5e618bdc62235e69bd496b3faac85b817dbf9de5d0cd1ede8b2a00be7fa13d2a41029e8382d374679ad3f344bd4926fa0ac948a11e2a6b24c33384019a97d"}, 0x99, 0x3) r7 = socket$rxrpc(0x21, 0x2, 0x4) r8 = getpid() syz_open_procfs(r8, &(0x7f00000002c0)='sched\x00') ioctl(r7, 0x7, &(0x7f0000000500)="ca8f1083fb7250ecd3cf5dcae16146be59febcc5e3cb315fb996414f3702a6c6640e9e829c3490afbd0b3dbd227401633ed627892e4a93534ff1547bdc2111b1b1b69f901cd1cc0a76bb731a6425b98a28a309bd5802c8e4b43ec52b4e00782548c9917ae59f8f52f0f762c07791d306a63efd99ceab648c4500099c94f3cdab212ac37b5e989caa6836a5e3ec1b5d4fbc5201e9cb7442b90d402659514879a6af735f895549965891e7706470c48f802568fccdb8d631498585017a67703267dbb6b0d371a3fbaa49d141b7c82e3e20a703e89881ef1f8ed3f352c631db2e404588a42fbabbd80ba0364c0148e9a86fd9fab53517109dc1d40f75950b807ba6eb1beb77366638d91e85e4a7e7b2fb802a4638ebddd21e90dc489f101332e156e0d80d461b835cc9bf4f2e75f2ca2aab922cf6e45d2c1ca98598b67159ec5228ad8ad30e30cd890060390bfa1e21b500f344a4c0d90d4175d1a4538fc9f5553a678be4350962d7463af907cf9949b02d6dccf8c84bcdceb1232582f6fa205203b4f623a5c781ce074ac23f0f0ba7b28e91c33bef092ac8e9dbda73adf7da301225745f65cdca0084e9f2a53f48f22274227208bfb49ce19382cf71d9f67b87f09bace14e4cff1ee084f31fa1074bece9357a40784911bf63438394a4c909b6b34521af3aa8640c680918e4d41d7354a016174746c10b92e68f40e4fe810ac9b72ccfdfa2d7c0540f40588de8a31b6f4c8f08257f01f2b99300eaf7e14815ba9d70f3a0e5e2a38652999368200b0741d8db53feadb4bc02f1676ee80aa9340e17bc6aa6e827127432ed5c9de5b867203db263acf0bf827b4ff7fc79ead7b134808f03c8a0332afa14442e6e35f00fb3ae382450c8003bc190dc7c493ed13f10143c0c4e95fcdb7d8cbd61e2a56afc8391d9dc7f52ef5bd41df89f3e1b311c596445315457c1d6353ea44ff4d7d2b16459b62f31b76795aeb4c3ae1df33fc0176b3db3eded5e43efd28ae58fe86aca812d2e9946aff9b08c64e18d8fb495d4f60e13f8f69f11e6bb2799e86780c026597205460b7aafea1d19a82f71351c961a041375a19c90576323ce00a554c2118bef20289c97790809da9542d3f458d6834a0240dc9722fd9c026441a2bf10873561a0588c21d402315945ec5a9afb394786607f82b8698cc7a328b47031f352a4e71171a0bef8c4d4494163f1a865330d0c589edbe356f75c99d4dca4619cd2325ec6c8efa57252bad65de43f8267d2659487466b6c4b5d0481df0bf13b08fceaa34032f0abc11984032573d33c91bc24311badeab01f785c355704995c3de71c4ca9eaf22e65024b06e2f8debecd28ebcce49b643b1a3fdbe8aecb7db63defee8537367c38bb2cf513f70cdb8a08bdce3624523e0e31c7b8d727219d9a5b476388d14fe8ffc9d9cf96010d955e5bf1397ee765acd844b06f060b4e6fba273f0a3c771b34553971ebe5f33fda9ccf4901269b0176e89797e88ecdb5e3da4045bfb8c542b926a8e160e085f8e66bc9c63a7b8350933485e16a3b7229c0770d50d95d9ea7c644c3fc7356e40cb3f13cbd0ad0b6f114777f4cd415a1ce4b94c4d5809d157e1ddcd6108b5c84cbbdec765770a25266aed149f8a4546ac6044a89a8aa41e785f41f284e4f6cf0c8159a6f1714a70ee71b17be364c725fc2598ba3b1f9d794c89da9329bc85432d1ef710e7167ac50718a25585f179035512dcecd80d724f135646576dccfb864f80a4ff64e032b9185cb791339b8b274dab145878c4ea812a3a42e6906e5b176653dceb7b4aca9b926a6a9d5fe1874e5f6e4680fc04af0ad181d146ef26433b42941ae7a3faa48f064099399294475cb82284466517730c0e2b1709823fcca1b5d6978ae3653d3b1bbe1cb0d6409fac8ec79a792223940c18ecb431fa3fa136be35edc0e2754ecd33f44569c2620415789607603c7ac2af852898d7f8926695775c3a46b472082def21640d97312ef9e268bcd73acb911fbde8882d47a52e940c4600084d12e0ac16a3e5daceff2772060f909ec13fe2619aea513dc92808dd5506bbfbfb1bd52756facf4a18e359c30d6328c4440d02d753f17fd771336747475d495a133145e6a5ca1afc37a5daec45633134ce1f1445e82318d92983cdd2647164302acbd6a55fc53c4a7c63b3cb610c17ab5d4015593ab540cac2005fb6dc4b4b190fb8d2e8c1253385349db13ff32df7f9e68c5e27e6d9cc5bf8e3c3b82a60d300235879b82fff0e33851fa23ebb8f8c5c012bf252399bbaba5dcfa0b075e4bd498cca120a66e660ff38fa90661da9d861c1964cb0808947ec8870c1381312530c004ed482c6f3a20256817f41f3b4f03ea2a00e5c59718bf223a5398e885925594ae273c618e130d633eb6c413003c6d505d2fcdb288af01591f46d684d35235c6f6e4b4172e25255fb1a7225c21e530943f4fd3d0934c82042cebb968eec3a8e3b4e22294231160f51c68a13b78bf5e3d4b75fce45e7cc9fe13e74e76daf0a32a6088ff2b799af0c3de0a9ba07fd3b9f4fc835232f3a686606f1a6d0da581cfec1c8051c61dd1ac6cc3b03a4d9a938232671f7e63f078c9142202400b0982d5cda294576849e6affe7841b11533ec94bd51dd993f272d5ae91d0271882887af7a6dbb794bc94390a9bd51e002ecc65a95e3bd4f39c382d40258c35e2fa38818c5c6615430119b2da70cfcd796a9768c813734ad2adde0d3442232335288b4fe3a3dfeb1a1a76226232c341b84612d2578cdeee9cb2cd133b05e5221a872dd4a95a44a020cf7de4b287a609d5fe54955fc7321dc07a0bca5ae861aff9720c65078b4c22dc5e6d425f5161c89e0f3bc36549cc6de011ca6e5db4805a8669b79442f6c56366722bb28b9f08a08ae70e3ddb72886a2aed18c7782446ce0ec0b3e926bb24ef8c1dfe74714950b4b443f31c610bc4af691dd1a49c0a23825af212f34b647c689db05a03c4472d1c6963f1ccfb6bfe6f2d999d779483a5668f82c76ef407abb329593ebd421245ab8814aa23c837bc24e249fd6efb1afb9bea4b79d5656221149628cfcd61ede6bc2910f2227818aa8e0c1ccd75bbce4487f7ea4d978c108d3b7ac1bc118253f451deb4a4e7510f963214b5c5207031d373c7acf36c5f119ee9457323cc5c35a65b4fb46f8f963f970530ba075a7d2348de1ce85150959eabb4d4c42c1e10dc57a3a3be624b07b789a87c5dea5f66049af040f724950e57cd9286c152a0a24910d18a9a209c9a15e3a08be16241548ffc70fdb01a6aad49cdd9ed0d4f6eb282a66c901d13bd3d2ba851f8c0d61eb74ff4e743a07e8147bf2dfdf1aa33d10652843739e6f7f6d802c43aae758ce9f4f2bc148a087e347303fbe126b74899b5752d6f6e7cbe66bebc4ccee253b1a4c433c92685e03198e5804cd896bf64c42b361e90659373ad0be75a0753ada5611f9211f77cc14e5f0c915e1102aa87cd5d3fe955eb36a3996ca9ea113deda76aa3628b0ce4572fac8e2cc73aeeb8eedfcc554fe3928402acba9af692758da073f1d86b99558845fbec0c54ea065a7ce1db3cf0c248a451297418e98e52b2c16050440f8cdc2f0e55eed7a2a3c2e2804c922956533653c97c11ed365a4553e48db6977b2b68a87ed9f6eec6146ff9d624c8fa99d27f42556a31df578e43f8c79a472432afde9c722b38894e74a066033570290892e68f73e3db141d0e1fcc08818586ad1aa0e17b3afdad663abcda3818790da3470b884659b6fb7e16de3f8ec0cdfc432c302265e511d3abd8ecd0d832ee14f88d6a78fc9294ba3fa5f66863f0ce5eb869928896bf01784fe7c7ada179a83cae7b5b7e9e49cafb007bbaa0121c4102a668e8a2a597a1185d137a7caaf97cf90e13218e8af7e44a41a974ec27e9eab7e13a2f1c69780edbaf8cbb455b1251d89494aa47babe04868a6106d3c028b02fc4e8ac864bdd39f15454501ec453b444a5de4171065f658509b7699813007e75ad1df039c0289db0d68bdd692030c35ce2cadfc83805099de3f6ce7754534811d8b6cac092fb08dd842c527006e876aed7d66e40d779e2c231cad28ac5693a0b19498a1b14823b98a6a3df626cbadaa66837a4c18e0550d14df22c2f1b9c98757e910715f2e39374d55b241d9e31437458d34943ef9310ba35a499b2ff9f72e2fc4c2de8fa4451c2b821402a496a434295e2408a7f6ec1c5b2fe6d4497a66c64512883d9b3014db6ec27330339c7917e6214e5a7095453ede74f773c116f3d361f83f3632770882112e868e9a04310095856cda2b9655f68e3033a60a66aa473c00165f896c75f52a79d0b9ea11d689975a01f501fb88724129241f77967b63f518a35711d948c2cbff8705877df55ce594f91f2e67ab384435c198ddd12093ee6384315c414016e87ea414b593f9038d4116b1bea0713e26be6df23d0572c762ba4056ca6c6518575f4ad52d75792806e5fad5397267f71f2ebf7c3f0134255c1c0e0139b74e416f5bdfbf243d4972247edd36c7024c2eb031943ebb7e5658614377fcb7f282c5f3ee60a9cf86fc87b85e2cb91ccd5686ed0c7ed58bbdef0f06d36d3cbc57d1c28006fd8a55d10a40fab5cb0ca2369fcbbddca66b1c407c3d4aa92374b8c1b37ffb6c4104f6f0f8425b38a0cf005cc2ab7d70950ccda6ea1d872eadf5461baddaf40aab0dbda5ea742ef2b8ff43261b25fde623d2daaf2100f025e42b4f7b0d0e4479d1efcf0e650c4427318b06901deddc634d49832529746f8885c0b7af5466310fe9164903efa9dc3907ffdd3c8aa9bcf8ece0164195f55218097a6f924087846bc05a37794abc2447d151bcc0c4b6b4cdf9cb05345cd4fae5e996d7c24d745fdc0551804b370251091991828a502d81dc42540558be66fd902be76578902471765994ad42e843d5c8288473551ea5e1a0160d006327ad1c5100dd014086e0f02b02a5a0386755928020851c1164e6a1a2c9ee431f58612a0a262b3adb6eed20701d7f4f3177c2cb7e3e616ee9cd57d9440871fdee1f28061e1730744579ed2e927339a371db137bab3755ec3238090adbdff587246c2f87b730532f57028ae77116576f54c608213e8054c195b9eb823bec9206c2e2c705845e63020e122f1b62f1e74eb525befadc62b0560da5e39664b6f37cf34a2caaf399916b5232b5238db2d6f2ecca2d4f530e0b76f70582b1a98b37f0b3dc3fd5c89ee32a048290b53bd28049fb904268f30517fd82fb92a92175e223a1de2565d53b75d3c2a138ab25f0f7e8fe5c4ca71342ea88d7b6b6e3de68969a200a4bfd151ef2f1d96d76042c764482798c2d93162639506837a50fb0a841a6d45dc472a182593c6b53d4418162ed2c8c927ce00740ee2d870a1e1fb5afd8fea589d905427bf653f0afc0453aeed7f7f976d78633d833fdcacc66f9ac68fef79380e1e6e9e7f4acbef4b910076535c6926467e453c3d28acf23bf668ddc3297eb9111b245b338167414b558c440e283fe053e00a6535ec0c5b98f9fb06fbf8e38d3adeda7d2a8cc04e799ed427273996668791e62f2dcb78777309b465f8c8513edbb53347f5d86840549fb82995a4656c021670753a47347f25ff4038556a5727000caeeb3bcc752e82da29337bee6124bbb5f6dd519b25d6c5e31980606387df3af64b18eb17dc85f3b22a4389f0fe4dd2f93ce66dbb2b68f2243fef87b78df4e86137dadfdfc9edd97821402288cded7afce8b3204e48c98d4b083d66746eaf28f0d0ceea666beac7b95784a") sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0xffffff7f0e000000}, 0x0) [ 953.273330][T24159] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:16 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/d\b\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) [ 953.340030][T24159] FAT-fs (loop3): Filesystem has been set read-only 12:37:16 executing program 4: r0 = getpid() ioprio_set$pid(0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = open(0x0, 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x10, r1, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x43d, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r2, &(0x7f0000000080)="0304000009304e0000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) 12:37:16 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x9, "7872cdf67a7c767a9c55fb02418b9606dcd885997f4ea5768532b0c9bf229383", 0x2, 0x8001, 0x1f, 0x10, 0x2}) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000002c0)=""/31) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x13a) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000140)={0x6, "1fccb0a10025cc75bb786ca926526ed5c7666d4d979e0b9a3af5cd38de5068c4", 0x58dae668906a2175, 0x0, 0x0, 0x400, 0x2}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000000)) [ 953.453551][T24180] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "subj_type=keyring" 12:37:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x2995, @remote, 0x7}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x4) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000000)={0xc, @capture={0x800, 0x2, {0x7, 0x3}, 0x0, 0xfffffff7}}) 12:37:17 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x10000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 953.576147][ T26] audit: type=1804 audit(1571315837.101:547): pid=24194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1056/file0/file0" dev="sda1" ino=17057 res=1 12:37:17 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x4000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:17 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000140)=0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {}, 0x20000}}) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="19bca8f6f151b81fcf7b458422e6866b5ebd6a5048ca853eecb54a295adfe20609aba2f6c3b1a55871175a720adb45", 0x2f, 0xffffffffffff8001}], 0x8000, &(0x7f00000002c0)={[{@case_sensitive_yes='case_sensitive=yes'}, {@disable_sparse_yes='disable_sparse=yes'}, {@disable_sparse_yes='disable_sparse=yes'}, {@errors_recover='errors=recover'}, {@disable_sparse_no='disable_sparse=no'}], [{@dont_hash='dont_hash'}, {@subj_user={'subj_user', 0x3d, '#[posix_acl_access,#^'}}]}) 12:37:17 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20c1, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @raw_data="c1fe7fde9326ac63c7ee3206d855f0dfceb8e772692783ae2e5829acda9dd46cfec17fb0912cb331f8a827d5db17b5ca412da3ae30d352ac8bac3ff4a308e3e92e55cf04cad056c4793a0f60ba6af8613331115b9612a6c4ebbf190be12d6e89d70cf64af63ea1cce4c404c67cbc95c79ec51ad01a94fde4c4115f840b117e878bdeaa903c2a4e08007fadbbe0d7662e5db4fe92e0a065e8216a95af9e8ded3c8e6ea32983e323515bf35574ca04d26477958da8649e9a9573407e05d31922938d429b2f1af092ff"}) [ 953.811076][T24212] ntfs: (device loop0): parse_options(): Unrecognized mount option dont_hash. [ 953.834810][T24180] REISERFS warning (device loop5): reiserfs_fill_super: Cannot allocate commit workqueue 12:37:17 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x174, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa40}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x718}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffae9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0000000}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x9000}, 0x10040000) [ 953.856164][T24212] ntfs: (device loop0): parse_options(): Unrecognized mount option subj_user. [ 953.921130][T24212] ntfs: (device loop0): parse_options(): Unrecognized mount option #^. 12:37:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x100) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000000c0)='usereth0em0ppp0*bdeveth0\x00', &(0x7f0000000100)='./file0\x00', r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x8000) syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9, 0x553304) socket$caif_stream(0x25, 0x1, 0x0) 12:37:17 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xf0ffffff0f0000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 953.960352][ T26] audit: type=1804 audit(1571315837.481:548): pid=24218 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1461/file0/file0" dev="sda1" ino=16641 res=1 [ 953.973369][T24212] ntfs: (device loop0): parse_options(): Unrecognized mount option . 12:37:17 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) close(r0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:17 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x6000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 954.090519][T24219] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 954.100033][T24219] FAT-fs (loop2): Filesystem has been set read-only 12:37:17 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x40002) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000080)={0x88, @remote, 0x4e21, 0x2, 'sh\x00', 0xa1209c2b51094ed, 0x3, 0x37}, 0x2c) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {0x0, 0x4}}}) 12:37:17 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) 12:37:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:17 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 954.377087][T24254] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 954.394609][T24255] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 954.404506][T24255] FAT-fs (loop2): Filesystem has been set read-only [ 954.413591][T24254] FAT-fs (loop3): Filesystem has been set read-only 12:37:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x401, 0x200600) 12:37:18 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 12:37:18 executing program 0: ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {}, 0x2}}) 12:37:18 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x100000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:18 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x8000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:18 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:18 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4018440}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x400) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept$ax25(r4, 0x0, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 12:37:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/166) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:18 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fcntl$addseals(r1, 0x409, 0xa) 12:37:18 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000380)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r4, 0x65457ec0d596f20f, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x68, r4, 0xc25c7f85379be5f7, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x800) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'system.', '/dev/vbi#\x00'}) 12:37:18 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dsp\x00', 0x400100, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r3, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40028900}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x20}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x58}}, 0xc0000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x800, 0x0) sendmsg$nl_crypto(r5, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@get={0xf8, 0x13, 0x10, 0x29699e6b, 0x25dfdbfd, {{'lrw-serpent-avx\x00'}, [], [], 0x2600, 0x400}, [{0x8, 0x1, 0xfffffffa}, {0x8}, {0x8, 0x1, 0x7}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) r7 = socket$unix(0x1, 0x5, 0x0) sendmsg(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000780)="ca5c9f655707c0dc84235de6601e7b", 0xf}, {&(0x7f00000007c0)="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", 0x1000}], 0x2}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f00000003c0)=0x1, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000200)={0xa0, 0x0, 0x8, {{0x6, 0x3, 0x0, 0x2, 0x0, 0xffffffffffffff2b, {0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x1, 0x0, r10, 0x0, 0x81}}, {0x0, 0x1}}}, 0xa0) fchownat(r6, &(0x7f0000000000)='./file0\x00', r8, r10, 0x800) 12:37:18 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0='bpq0\x00', 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000100)=@ng={0x4, 0x2, "45a18eda8a38357a"}, 0xa, 0x2) 12:37:18 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xa000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:18 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x200000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 954.980864][ T26] audit: type=1804 audit(1571315838.501:549): pid=24310 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1463/file0/file0" dev="sda1" ino=16897 res=1 12:37:18 executing program 1: request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='em0\x00', 0xfffffffffffffff9) r0 = syz_open_dev$vbi(&(0x7f00000002c0)='\x00\xcf\x8a\xf2*\x91D\x10{\x00', 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = dup2(r1, 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000003c0)={0x0, &(0x7f0000000380)}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000000c0)={0x0, 0x8}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) socket$isdn(0x22, 0x3, 0x4) 12:37:18 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000036002908000000000000000002000000120200402ccf4ec155a88f14000100005b5d1bac704d2a7d5dbcb368ba53530000000001bbba11213c15a646642e2445c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc89e68c7f5949b8fed4b3cbb6c003b654e50968bd424660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa780366bd5f39b7476579e21556b5fa2d600c689cf13411a0c0b4d7f5607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3dbd2c8a17ca0000000000"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x2000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000080)={0x20, 0x1, 0x9, 0x2, 0xff}) 12:37:18 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0xa0a, 0x9}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:18 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:18 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) write$binfmt_aout(r1, &(0x7f00000002c0)={{0xcc, 0xdb, 0x5, 0x3e3, 0x1ea, 0x0, 0x311, 0xfffffff9}, "6479ca52d412acf6ac3f05df8f9c40c5727ef0a7343a6aa1e2668417f53e45a948005a54acd291f29f7ca0e6f30efd07836038e8facd19924ded3449269106a72d854dbea4121aeb355b58730ac0c4f4dcc734c77df32c785ea0923ddc55cdd4901917e197f0133fd4d151e234d0de3451ed1487b33a103726b271204187f7493d232906f702cb29f6d7cca769c5484259319b21a0737b400b021bf323e0f69599f8c92bdab4fcc866468fbea9461d8089f8d2b323e5891b3c62b077897c426f990972ed240949", [[], [], [], [], [], [], [], [], []]}, 0x9e7) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) [ 955.299819][ T26] audit: type=1804 audit(1571315838.821:550): pid=24345 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1060/file0/file0" dev="sda1" ino=16689 res=1 12:37:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x11}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x100000001, 0x440404) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000240)={0x80, 0x1}) r3 = accept(r1, &(0x7f0000000100)=@ipx, &(0x7f0000000080)=0x80) connect$tipc(r3, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x4}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:18 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {0x0, 0x1}}}) 12:37:18 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:18 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xc000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 955.441845][T24347] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 955.444011][T24367] net_ratelimit: 49 callbacks suppressed [ 955.444015][T24367] netlink: zone id is out of range [ 955.456169][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 955.456217][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 955.475630][T24347] FAT-fs (loop3): Filesystem has been set read-only 12:37:19 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum}) [ 955.509257][T24367] netlink: del zone limit has 4 unknown bytes [ 955.524350][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 955.530234][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:19 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x204000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:19 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='\x00\x00\x00\xabc\xb3b\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 955.617307][T24389] netlink: zone id is out of range [ 955.662246][T24389] netlink: del zone limit has 4 unknown bytes 12:37:19 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000001c0)={0x0, @capture={0xee8efadbf5bd120a, 0x1, {0x7, 0x1f}, 0x1, 0x8000}}) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4068aea3, &(0x7f0000000080)) dup3(r1, r2, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000100)={0xf1e7, @remote}) dup2(r4, r3) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r6 = dup(r5) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r6, 0x4) 12:37:19 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @raw_data="3f6e0a65043e7a0221f027dcd9dc0052438fc9b9f96368b9441c4b515fc5249d6ccf8625cad033c190bd41a7d37ad67b52b26359d4732adffe149d96f587794f1171203be8c922d1debacd54d8a6dbf6b0ab31aba25f20c75f4b470a734d27b630596b11b3911d07c63568a5c3e1d9e20713e8b7cb61f580663b0ba278d94f0078912acf9ff09b4d7c42cb0e221635f103fe9f7567edfe12b61bbb90ffa51982c120491265521552e73842e58c598852d18b9f3557d613abd8504b7e121f07fd0714d1750e93e5f6"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) ptrace$getsig(0x4202, r3, 0x4, &(0x7f0000000100)) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000080)) 12:37:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 955.844151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 955.849961][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:19 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xe000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:19 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='Idev/ \x00\x00@\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @raw_data="0b44b102030160f620dffcb14de83762629b93cad074f0f8202cbd0232c0004a0d3f3abbb7e4bc71cf7f0fd28979ff8613223a057806cf41e7370716f5f8e1be2941d48cf8a48ba4abb973ef521c0c9d2195dfaeec297cdea773810661fccbbebcbe79e7d9159180a4ac54582aafc9f901fe85f18a78a12f1a3d81bdbb0c924d7356f5222af7ae1fbdf5ae7b830fc451a6e580014d47d0ae95663d866a37836305bf9ccd7325061b208e30cc0c741f60c38b17d24ce6e1893c9cdfc3929159c362e4128b4378463e"}) 12:37:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000080)=0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) flock(r2, 0xd8ab98cdb8c5e5e9) 12:37:19 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x400000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:19 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a641316be0a22f2661b9a6754ed01cc9dc344"], 0x8) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:19 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:19 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 956.156933][T24434] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:19 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) getrlimit(0x5, &(0x7f00000000c0)) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000000)={0x6, 0x400, 0x6026}) [ 956.239036][T24434] FAT-fs (loop2): Filesystem has been set read-only 12:37:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$sock_int(r2, 0x1, 0x11, &(0x7f0000000340)=0x3f, 0x4) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)={r7, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000300)=0x84) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 956.331450][T24449] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:19 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0xe3ebead79b4b12e8, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0xa0c00, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000003c0)={0x6, 0x8, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = geteuid() r7 = getgid() r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x2}}, [0x9, 0x8, 0x9, 0x5, 0x2, 0x80000001, 0x6, 0xdff, 0x7ff, 0x9, 0x6, 0x271d, 0x5, 0x80000000, 0x4]}, &(0x7f0000000580)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000440)={r10, @in={{0xa, 0x400, @local}}, 0x1, 0x0, 0x0, 0xbce, 0x22}, 0xa6) r11 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$ntfs(&(0x7f0000000200)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x7fffffff, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0x278) write$P9_RSTATu(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="7d0000007d010000005e00080030e20000010404000005000000000000000000958505000000060000000700000000000000b8fe2f6465762f7662de72e8457c8ce4b46f75706d643582756d776c616e300600776c616e312b0a002f6401000000626923000a002f6465762f76076982b468a02300", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r12], 0x7d) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r13, 0x0, 0xfff8, 0x0, 0x8001, 0x5d1e6075}, 0x14) ioctl$UI_DEV_DESTROY(r0, 0x5502) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = fcntl$dupfd(r14, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r16, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r17 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r17, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r18 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r18, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) io_uring_register$IORING_REGISTER_FILES(r15, 0x2, &(0x7f0000000400)=[r16, r17, r18], 0x3) 12:37:19 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x10000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:19 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 956.394009][T24449] FAT-fs (loop3): Filesystem has been set read-only 12:37:19 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) 12:37:20 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x600000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000000)={0x4, 0x8, 0x1, 0x4, 0x14, 0x6, 0x40, 0x4f, 0xfff, 0x81}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:20 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000080)) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:20 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:20 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x3f) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x1d2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:20 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7fd949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5e123500994331bbd3566ee12d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 956.793948][T24490] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:20 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3, 0x1, 0x0, 0x6}, 0x21) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x80000001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x97}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) sysfs$1(0x1, &(0x7f0000000080)='/dev/vbi#\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x2) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) [ 956.834992][T24490] FAT-fs (loop3): Filesystem has been set read-only 12:37:20 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x100000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:20 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:20 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x604000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:20 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000000c0)=0x10001, &(0x7f0000000100)=0x9a) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x2}}) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x18001) fstatfs(r3, &(0x7f0000000080)=""/60) 12:37:20 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x7, @output={0x0, 0x0, {}, 0x0, 0xfffffffe}}) 12:37:20 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x6, 0x8, 0x5, 0x5]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10020410}, 0x4008800) 12:37:20 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x420800, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x9) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:20 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x0, 0x5, 0xffff, @random="d49598da3171", 'team_slave_0\x00'}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x2, {0x1}, 0x0, 0x1}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000080)={0x1, {0x90, 0x5, 0x80000001, 0xffff}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$llc(r4, &(0x7f00000000c0)={0x1a, 0xfcd7, 0x3f, 0x1, 0xff, 0x6, @local}, 0x10) 12:37:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xe7, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x4, 0x0, [{0x80000001, 0x0, 0x9, 0x1000, 0x401}, {0x40000001, 0x200, 0x5bb95cdc, 0x88d2}, {0xa, 0x8, 0x91, 0x4b, 0x5}, {0x0, 0x80000000, 0xfff, 0x7f}]}) 12:37:20 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x100080000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:20 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 957.328298][T24540] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:20 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000140)={0xffffffff, 0x2, {0x2, 0x1, 0x4, 0x1, 0x5c}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x8, 0x0, [{0x400002d0, 0x0, 0x1}, {0x3a7, 0x0, 0x4}, {0xa16, 0x0, 0x2}, {0x204, 0x0, 0xfffffffffffffff7}, {0xa33, 0x0, 0x200}, {0x60b, 0x0, 0x7}, {0x8c5, 0x0, 0xfffffffffffffc01}, {0x211, 0x0, 0x3f}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000002c0)={0x16d, 0x4b2, 0x1ff, 0x9, 0x1f, "cdc5d0f21e6eac6f188d4ef2c2afc7f62aa909", 0x80000000, 0x3}) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) socket$key(0xf, 0x3, 0x2) 12:37:20 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1ff, 0x80022) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000000c0)={0x2, 0xfffffffb, {0x56, 0xff19, 0xfff, {0xc61c, 0x5}, {0x7f, 0x6}, @const={0xffff, {0x8000, 0x478, 0x8, 0x8}}}, {0x5, 0x7fff, 0x4, {0x1, 0xffe1}, {0x0, 0x7}, @period={0xbae78f9877071126, 0x4, 0x9, 0x7fff, 0xffe0, {0x2, 0x7, 0xfff, 0x4}, 0x3, &(0x7f0000000080)=[0x9, 0x3, 0x0]}}}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) [ 957.374937][T24540] FAT-fs (loop3): Filesystem has been set read-only 12:37:21 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x608000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r2 = accept4(r1, 0x0, &(0x7f0000000000), 0x80000) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) getsockopt(r2, 0x3, 0x3cb2, &(0x7f0000000500)=""/133, &(0x7f0000000100)=0x85) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x90340, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000001c0)=""/210) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:21 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:21 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x3, @output}) [ 957.588373][T24582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 12:37:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f00000007c0)='trustedpper\x00\x00\x01\x00', &(0x7f0000000a00)=ANY=[@ANYRES64=r2, @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRES32=r1, @ANYBLOB="f0e65cf153b6788b52aa163470c8101706312ab42aea2ee57eca9b47145e48c9c6aded84bfa588560bc50d", @ANYRES32, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYPTR, @ANYRES32=r4, @ANYRESOCT=r5, @ANYRES16=r2, @ANYRES64=r1, @ANYRESDEC=r6], @ANYRES64=r1], @ANYPTR=&(0x7f00000009c0)=ANY=[@ANYPTR64=&(0x7f0000000940)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC=r1, @ANYRES16=0x0, @ANYRESOCT=r6, @ANYRESOCT]]], 0x3, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) lsetxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='secur\x02\x10\x00\a\xc7\xff\xfb\xf1', &(0x7f00000005c0)=ANY=[@ANYBLOB="02d3eaeb03bf85b3372dc9815934236cc469122e05c38356da1df7a22cd37468ea3254fc132277abac9dfc125a36ce6f481a9a93feefa8111eb2733517943eaf426920a29c6c1e07a7fdc05782855401308044426aef862e23a987f16ab01d653550a58603c86b5689771a15704d0510a268548aab956e5f81dc9705bef6b000000000a5dcaecd"], 0x11, 0x1) rt_sigprocmask(0x0, &(0x7f0000000140)={0x8000}, 0x0, 0x8) r8 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TUNSETLINK(r8, 0x400454cd, 0x22c) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0x10001}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x2f}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) getsockopt$inet6_opts(r11, 0x29, 0x37, &(0x7f00000002c0)=""/59, &(0x7f0000000300)=0x3b) openat$capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f00000000c0)={r9, r10}) [ 957.646146][T24572] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 957.657350][T24572] FAT-fs (loop2): Filesystem has been set read-only [ 957.663627][T24589] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 12:37:21 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x1, @capture={0x1000, 0xa397661201074647, {0x8, 0x1ff}, 0x0, 0xffffffff}}) 12:37:21 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x200000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:21 executing program 4: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:21 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000001300)={0xffffffffffffffff}) sendmsg$rds(r2, &(0x7f0000000e40)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000080)=""/194, 0xc2}, {&(0x7f0000000300)=""/150, 0x96}, {&(0x7f00000003c0)=""/38, 0x26}], 0x3, &(0x7f0000000d00)=[@rdma_map={0xf9, 0x114, 0x3, {{&(0x7f0000000f40)=""/168, 0xa8}, &(0x7f0000000500), 0x21}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0x3}, {&(0x7f0000000540)=""/12, 0xc}, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)}, {&(0x7f00000006c0)=""/220, 0xdc}, {&(0x7f0000001340)=""/233, 0xe9}, {&(0x7f0000000680)=""/46, 0x27}, {&(0x7f0000000900)=""/180, 0xb4}, {&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000a80)=""/129, 0x81}], 0x9, 0x2, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x81, 0x2}, &(0x7f0000000c00)=0x100, &(0x7f0000000c40)=0x3, 0x7, 0x8, 0x1ff, 0x1, 0x41, 0x2b}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x401}, @mask_cswp={0x58, 0x114, 0x9, {{0xeb, 0xfffffffb}, &(0x7f0000000c80)=0x41, &(0x7f0000000cc0)=0xffffffff, 0xc72, 0x1, 0x8, 0x1, 0x1, 0x6}}], 0x140, 0x9dab28555f0532f5}, 0x8000) 12:37:21 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1b4, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="34ef5aded94c7ae47500384afc1aef0d"}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd098}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x14}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xd16}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0xc000}, 0x30084000) 12:37:21 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x618000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:21 executing program 4: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:21 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x121100, 0x100) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x7, 0xfffffff8, 0x3, 0xfc00}, 0x10) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:21 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) write(r2, &(0x7f0000000140)="3f68a6feeef8e208bc9def", 0xb) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=r6, @ANYBLOB="083f0000d1b760f955d92f70008000"/26], 0x28}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@mcast1, 0x5a, r6}) 12:37:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x1}, 0x0, 0x0, &(0x7f00000000c0)={0x805, 0x18, 0x5, 0xfffffffd}, &(0x7f0000000100)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x1003}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={r1}, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 958.077759][T24632] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 12:37:21 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000080)) mq_unlink(&(0x7f00000000c0)='\xd0selinux)\x00') r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400204) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x24) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x63, 0x376, 0x4b, 0x33d, 0x8, 0x6, 0x1a7, 0x9, 0x3f, 0xc6c3, 0xfff, 0x2, 0xcf34, 0x3f, 0x100]}, &(0x7f0000000180)=0x100) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000000)=0x4) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x7, @output}) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000440)=0x1, &(0x7f0000000480)=0x4) [ 958.183832][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 958.183840][ T26] audit: type=1804 audit(1571315841.701:555): pid=24627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1066/file0/file0" dev="sda1" ino=17561 res=1 12:37:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000008feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6404000000000035040400010000000704000002000000b7050000000000006a0a08fe000000008500000009000000b7000000000000009500000000000000e8184a4f4a273561cda73856364022f39a191bef1a383cc259e83bfc310a9141f1ce81a6793ce7fab12311eaee5ad864bdc6"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:21 executing program 4: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:21 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x204000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 958.242881][T24644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 958.287652][T24644] device veth21 entered promiscuous mode [ 958.313348][ T26] audit: type=1804 audit(1571315841.831:556): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1470/file0/file0" dev="sda1" ino=16609 res=1 [ 958.340115][T24644] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 12:37:21 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x101000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000140)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x1f, 0x2, &(0x7f0000000080)=0xffffffffdd852bfe}) 12:37:21 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x807000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:21 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x9, @output={0x0, 0x0, {}, 0x0, 0x20}}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0xc0380) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @bt={0x4, 0x9, 0x80000000, 0x7, 0x8000, 0x6, 0x2e}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f00000002c0)={0x6, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000000)=0x2, 0x4) [ 958.395028][T24632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:37:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x6}, 0x8) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0x5200000, 0x4, 0x1, 0xfff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 958.557094][T24676] Unknown ioctl 35111 12:37:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 958.602031][T24676] Unknown ioctl 35111 [ 958.659021][ T26] audit: type=1804 audit(1571315842.181:557): pid=24674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1067/file0/file0" dev="sda1" ino=17593 res=1 12:37:22 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x500000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:22 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101480, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x4, 0x0, 0x20}, 0x98) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x0, @output}) 12:37:22 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00') [ 958.703984][T24667] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 958.736712][T24667] FAT-fs (loop3): Filesystem has been set read-only 12:37:22 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0xf00000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:22 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x39, 0x6, 0x0, {0x4, 0x4, 0x10, 0x0, '\\(selinux@system'}}, 0x39) 12:37:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe76, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, 0xfffffffffffffffe, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000002c0)={0xf86f, 0x0, [], {0x0, @bt={0x3, 0xbc, 0x1, 0x2, 0x8659, 0x7ff, 0x2, 0x0, 0x400, 0x20, 0x0, 0x1000, 0x9, 0x5, 0x8, 0xdc26fcd4cb9f68c4}}}) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000000080)=0x1) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000000000)={{0x2, 0x0, @identifier="fb8b1a3d7713bda7b3be1e3c080c2d1e"}}) 12:37:22 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) socket$caif_seqpacket(0x25, 0x5, 0x3) 12:37:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:22 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000280)=""/150, 0x4000, 0x1800, 0x1630}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0xffffff7f0e000000, 0x0, 0x20000010}, 0x0) [ 959.110245][ T26] audit: type=1804 audit(1571315842.621:558): pid=24715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1068/file0/file0" dev="sda1" ino=17594 res=1 12:37:22 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x50e000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:22 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = socket$kcm(0x11, 0x2, 0x300) sendmsg$kcm(r4, &(0x7f0000001900)={&(0x7f0000000500)=@nfc={0x27, 0x1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000580)='\f', 0x1}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000002600)={&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000000)=@xdp={0x2c, 0x0, r5}, 0x80, 0x0}, 0x0) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000000)) 12:37:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:22 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x1000000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000080fbece58d2260660c165cbe46d66093cd607a4ca0d6f0115e039", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x14) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='nr0\x00', 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r3, 0x0, 0x0, 0x7ff}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x3}, 0x8) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f00000002c0)={0x4, @output={0x1000, 0x1, {0x6, 0x4}, 0x8}}) 12:37:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:23 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x7, @mcast2}}, 0x80000001, 0xc5a6, 0x0, 0x1000, 0xe6}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r4, 0x7}, 0x8) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @capture={0x800, 0x0, {0x7, 0x8}, 0x5, 0xffff}}) [ 959.568275][ T26] audit: type=1804 audit(1571315843.091:559): pid=24754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1069/file0/file0" dev="sda1" ino=16577 res=1 12:37:23 executing program 0: io_setup(0xe2a1, &(0x7f0000000000)=0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x80, 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x800) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r6 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x3, 0x4000) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x8140, 0x0) io_submit(r0, 0x4, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000080)="eef8aa1d27b72cbe5870d0b6ac47f3d09c429e22a1c69e3455ea72d7fa9f0f763a3e940572fd4f1dcec4afe3c6c4e05031387fd1453f30a5a76f9417468916a7476ac3b858ae4b8a8cd68ab9b504370f0003f8744ce41e0fd56a0730d77df4abfcd120294259f068377820472c5b906445e16a1fe976a319597dec2581558be3aa4a6f805dac521505a851547dc5084515f0ee95f507273849c2c8e33476f9c7b17071092f1bf385f09c60fb69b8bf1e1ec6b7daace80e3bf12661", 0xbb, 0x6, 0x0, 0x1, r2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x4, r3, &(0x7f00000002c0)="a53efdfbe66661ef03d765e6670cea11be073ce8f9cc3f40a5c609db7991326e74f59b4b7684da90110b0df049da7176defe3b9afa7ad1b3f656b68be48d570c19a757a47fcb8b52ce21f592d1d86e161401923f91ac8750196f62", 0x5b, 0x9, 0x0, 0x1, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0xff00, r5, &(0x7f00000003c0)="1aedc4ce390ca50d9adceec89996266dbc4e1250bc002796f4380bef60abe71e868baba92b3cd24e89949ff5ee10aef2a64ffce78bda924a37509ff5d6639d44db219113bca807dcfcf33091950ef7bfa4e3d6e0d002d0820947b63a26b5257643963a1fb284b4c7660f", 0x6a, 0x2, 0x0, 0x0, r6}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x3, r7, &(0x7f00000004c0)="590851c94487a49fcde0bd6419e0540f94b9c25d073f397066a8da1960242174cbb1dadd4ba489ad49a74c849cad002c467d2d327202efbad47137ed36883975448111f83a74dc89d439aebed9507c72104da9aedf0a57dfa5bba917a56c9de9ce3acbbba47da9a31cf9022cb269f88c93856240acf0ee1f2955d242364a69e161c867ebfc508f9be3148d1ab7e53e151dde58d768", 0x95, 0x0, 0x0, 0x0, r8}]) r9 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:23 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x600000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 959.714425][ T26] audit: type=1804 audit(1571315843.221:560): pid=24768 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1473/file0/file0" dev="sda1" ino=17441 res=1 12:37:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4f8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x75180fba9db0dec1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xfe92, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[]}, 0x1, 0xffffff7f0e000000, 0x0, 0x4000000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0xffffffffffffffff, r3) r4 = geteuid() r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r5, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) connect(r6, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r7 = gettid() r8 = gettid() sendmmsg$unix(r6, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r8}}}], 0x70}], 0xfd, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r11 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r13 = socket$bt_bnep(0x1f, 0x3, 0x4) r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r15 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r16 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r16, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sendmsg$netlink(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000001c0)={0x10, 0x3c, 0x300, 0x70bd2c, 0x25dfdbff}, 0x10}, {&(0x7f0000000200)={0x148, 0x16, 0x1, 0x70bd2a, 0x25dfdbff, "", [@generic="2d52b9e747ddc0435880ac21b1e685aed5474558323d8b7051da8e404fbe54772cad87d5bba6ca5b676fcf5f10191fdf9a241dc87f3bfe7356cd191f1ababd6c197ced9b6aaa671f6c0810fd1919fa43ce31bfa118cef98c57d4cf5c9931628375b2385eaef1944cb0948d0ce33e17097073c7ef7b6249c3b2378d6d3b61c902eed3eb73270a14c8f27146c75ea6d9fa99ede7282823e505cfa32570c059a9f395cbd693fc534623cb7bb648cd031fd6455b110006ead4d82c919e6ff24b8e5ea36a80f624f07e9652fe8eb5", @nested={0xc, 0x1a, [@typed={0x8, 0x4c, @ipv4=@rand_addr=0x7fff}]}, @nested={0x10, 0x70, [@typed={0x8, 0x44, @u32=0x77ad}, @typed={0x4, 0x96}]}, @typed={0x14, 0x43, @ipv6=@remote}, @nested={0x18, 0x6b, [@typed={0xc, 0x76, @str='(^-.\x00'}, @typed={0x8, 0x10, @str='\x00'}]}, @typed={0x8, 0xf, @uid=r3}, @typed={0x8, 0x1b, @fd=r0}, @typed={0x14, 0x8b, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x148}, {&(0x7f0000000380)={0x112c, 0x16, 0x200, 0x70bd29, 0x25dfdbfb, "", [@nested={0x1110, 0x1d, [@typed={0xc, 0x7f, @str='IPVS\x00'}, @generic="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", @typed={0x8, 0x79, @uid=r4}, @generic="4e8cd53284917cdb43e8eaf766ab579643abbe9800acfbfb3164bcb284e19dd757c484598c45de5dd4", @typed={0x14, 0x2e, @ipv6=@remote}, @typed={0x8, 0x32, @pid=r8}, @generic="70fc96b84da0f8c57e7de181bff3bde438509bc0fb04e708bd9e4c46e7b44a0001a003462e0f0fe240e01fe35440c0d6", @generic="de453cbc1540c45ae87131ec21089a50c481c59b712f98eb90212d6685343e666e28654597b3ee53c334eb26be2a230d8db2b36ee2275d7c0cc41d0effc6d5f9d3e06b5d99ef36825c111da1a58b1df9ffc64b9dbc7fd83ad71c99378a6431fe37f77d43d7a6fa22f6a0557d9103f6bb33b33ec120", @typed={0xc, 0xb, @u64}]}, @typed={0xc, 0x41, @str='IPVS\x00'}]}, 0x112c}, {&(0x7f00000014c0)={0x1c8, 0x10, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x61, @fd=r9}, @generic="802276bc6213a854829dc7439a421b32602ed536144a81a15a30ef1d96d415b4346592c02d6320e72144cd56d75d9b561f4baa5999150fc9c1687dda90ccdbae49cfcaf23a872f48169bc8bb573970401033c45580c03476aa74aa6f949d7227bfdd6e55f2da38a9aa69625418edd4df0ac134094281efba906f35a9c6b017f616709b3dcf84e1734f128bd277734ade8aec22fcd0cd95d01eb04bd8df365337c7f924fb75cb768d414bde8f2a824597bf9b020bf06f3e", @nested={0xf8, 0x5d, [@generic="a08e7fb76f0b9ae548a922e43ab2711f8bbbf8e7a928b705138e5b3e2ff7fd2ee93d3d6d39ab896a8634ea5c61c2b6748cf12deba78cec51f6aa78c7495da922076eeb470fdebee52e074472764dd0bda1c4907782c0830e575a57a8d8f0ad9e67abafa87ebf6780dae011e793677659eb105013c8defd7e9115d47a98216b1cdfd8353a6efdc925ace273a30ba1e71b11d5054590170c0ff6a2e171f470ec54f56e0cecfaae34192a8af316e02e9eaf45074fe088dec2945f989ab8544f71d32f5a35b1b09c49b4240e03511288be4272308fb4af2208bd082e3aa78bb365e6a059d90985dea6c04636d368", @typed={0x8, 0x87, @u32=0x10001}]}]}, 0x1c8}, {&(0x7f00000016c0)={0x10a4, 0x2b, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@generic="a1aff3d378b24d067db33cf4d68f1dafce956c94248c733a6ba5a408d9cd950ac4a3d88257b1a48bdc548e8d7b0d9a549e13ef4d5c76fe8fec1ca3ec9f0ea56d16c70cb1b4a3c06080f70a68859ac2544372dc8e3bb37ae699633995ab9be09af79f34134bde390c0a271c4553c029d2e2500c0f94bd5ce3b9920d9cf88216cd34cc5b8bc35dd774e9ae9913b4d35390e5fca355", @generic="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"]}, 0x10a4}, {&(0x7f0000002780)={0x180, 0x35, 0x200, 0x70bd26, 0x25dfdbff, "", [@generic="06702113dc8272f45321a115d9b943cbb4ed07e6918d34fa7801c1d3d993f8d224fe44deb4e2df6dd45434c0a536e35a1fb91e2f2c9104c250f757a9a486", @generic="6891f77d205dd9a82eef30b21784fe", @nested={0x120, 0x43, [@generic="2b38a7a7a381181d4726cc860f473a64465d5a7e71526a8c444a5f8510d1ea1230b35dd2bfb6dd9e156dd406d8b93dcd1714dd3c6a2b5f60e933916a6554d82210101719359cbed05abfd2717c0babffc31cae0e800f3b4bc1f30ca1a74b9ae55f49ae07b25b919cf30fd3a86a389c6aae4a4e67a2dc71b65363fad4797b3ac0fde59de039feb71fc061a11dc958479ca5e6020290f481c676b8a6c5b6d2207836b44249a17f860ba92c537a3ba4de5830209d9a0702eef132f8ff6dab424a6cd8ca95b29b2c7c4433e64bad6094f2d4d0ad17a1bda60e0e6b34e62cd3c4703df57e76d7ea00764368356b2c1147f3e7", @generic="58a5d901303feda2a9d3de597a682d8fd0b0347ead12d52b6fc19ce5", @typed={0x10, 0x7e, @binary="3e27a6345a8f60c283"}]}]}, 0x180}], 0x6, &(0x7f0000002980)=[@rights={{0x20, 0x1, 0x1, [r0, r10, r11, r0]}}, @rights={{0x18, 0x1, 0x1, [r12, r13]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r0, r14, r15, r16]}}], 0x68, 0x20001}, 0x800) 12:37:23 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x100e000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x200, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_LINK={0xd0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaabd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x57b1}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8d1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff801}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x85d31fc72c204b56}, 0x20004000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) 12:37:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x1) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x30200, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/48, &(0x7f00000000c0)=0x30) [ 959.996625][ T26] audit: type=1804 audit(1571315843.521:561): pid=24793 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1070/file0/file0" dev="sda1" ino=17589 res=1 12:37:23 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x604000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:23 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2a843, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x1000, 0x0, {0x8, 0x49a4513b}, 0x3, 0x7fff}}) r2 = getpgrp(0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect(r4, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = gettid() r6 = gettid() sendmmsg$unix(r4, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}], 0x70}], 0xfd, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0xffffffffffffffff, r8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r11 = open$dir(&(0x7f0000000180)='./file0\x00', 0x10000, 0x1) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/btrfs-control\x00', 0x2240, 0x0) r13 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r14 = socket$unix(0x1, 0x5, 0x0) bind$unix(r14, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r14, 0x0) r15 = socket$unix(0x1, 0x5, 0x0) connect(r15, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r16 = gettid() r17 = gettid() sendmmsg$unix(r15, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r15]}}, @cred={{0x1c, 0x1, 0x2, {r16}}}, @rights={{0x14, 0x1, 0x1, [r14]}}, @cred={{0x1c, 0x1, 0x2, {r17}}}], 0x70}], 0xfd, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001ac0)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000001bc0)=0xe8) r19 = getgid() r20 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r20, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fcntl$getownex(r20, 0x10, &(0x7f0000001c00)={0x0, 0x0}) lstat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0, 0x0}, &(0x7f0000001d40)=0xc) r24 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r25 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r25, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r26 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/mixer\x00', 0x8080, 0x0) r27 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001dc0), 0xc) r28 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r28, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r29 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r29, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r30 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r30, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r31 = socket$unix(0x1, 0x5, 0x0) bind$unix(r31, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r31, 0x0) r32 = socket$unix(0x1, 0x5, 0x0) connect(r32, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r33 = gettid() r34 = gettid() sendmmsg$unix(r32, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r32]}}, @cred={{0x1c, 0x1, 0x2, {r33}}}, @rights={{0x14, 0x1, 0x1, [r31]}}, @cred={{0x1c, 0x1, 0x2, {r34}}}], 0x70}], 0xfd, 0x0) r35 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0xffffffffffffffff, r36) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001e00)={0x0, 0x0, 0x0}, &(0x7f0000001e40)=0xc) r38 = socket$unix(0x1, 0x5, 0x0) bind$unix(r38, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r38, 0x0) r39 = socket$unix(0x1, 0x5, 0x0) connect(r39, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r40 = gettid() r41 = gettid() sendmmsg$unix(r39, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r39]}}, @cred={{0x1c, 0x1, 0x2, {r40}}}, @rights={{0x14, 0x1, 0x1, [r38]}}, @cred={{0x1c, 0x1, 0x2, {r41}}}], 0x70}], 0xfd, 0x0) lstat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) r43 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r43, &(0x7f0000000200)={0xa0, 0x0, 0x8, {{0x0, 0x3, 0x0, 0x2, 0x0, 0xffffffffffffff2b, {0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x1, 0x0, r44, 0x0, 0x81}}, {0x0, 0x1}}}, 0xa0) sendmsg$netlink(r0, &(0x7f0000002080)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x28000001}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="440100801f00010028bd7000fbdbdf2594467a1e5e472e632efb8a557d15bf53fbd800b525c11bb9e1e6757876dfe2cbe60850ad02759844d0e16f0fe3ec863e60a9f9a9219be377a1aeaf11ef51cb83038c68a902c5c92e66fdd5d905b3289e9875306653ea3f56946864e3e7349d4f29ea7fbc46d455e58af73a741ba86a3c5041f4fcd87f3c67180ced2da1a659500bb7817f98b292eb34361a7a49f920807ac31b27d68c8d658afb4b1d0317c820895ad491b4859f93f737d162e7684c9a90812444af3127e634def36266c723334bf7f852000b700527d83529c11d2f2e268d4627944387327b1ccdf3b0ffc2b79ae9b00e08004d00080000003800260008008d00ac1414bb6c19503f0188d8051400340000000000000000000000ffffe000000204008800"/314], 0x144}, {&(0x7f0000000440)={0x4bc, 0x17, 0x0, 0x70bd2c, 0x25dfdbfc, "", [@nested={0xe4, 0x86, [@generic="e65fad99aa43d2e97275bf6b653dc1fc29097550216a6e462d714b539848b640288ba17f69c7f7ffbc62b40dab5fefb2a26c244950b44a99e4cf54cd32f8061edc320219d4788d81744fa222", @typed={0x8c, 0x25, @binary="a69b2f3ef9251a6b99fe1a04c756b9aa0005d0b5f56eca42216895dedf093e6a735cce9e8a1ece7a14cedf49758548ba42aae8c463baf6b69dcbf0b7a57be1b1bb93f06123acf9d1be555d9bba947ed96f3489fe0901e8619ad8ecbd68674a95c5f375c0f45e182a0d6417aa163ad32a1df9f1d0180f6d4568d222b284ad4626fedd8abf57ce5018"}, @typed={0x8, 0x2a, @pid=r2}]}, @typed={0x4, 0x6f}, @typed={0x14, 0x2f, @ipv6=@dev={0xfe, 0x80, [], 0x15}}, @nested={0x39c, 0x5f, [@typed={0xc, 0x38, @u64=0x2}, @generic="43ea133943b5f34b822e912665ba388e125e888d4b189d8b9ca44927d7c89ad2c06d600276894ba00dbeb8e315dcb4860a7e3e4865113b0984930422117fe0104be663616aad8efbf38303bdd2b7ed32715c4ebed6f9a2e82d9171f573", @generic="1798aa9e493d30f6b6d502ebd3b58dc7ebdc2cdb7f10715da53c450fd8e98cf6d8c96f478953e3990a17ef9602b86397f0c62d343358932bedc8d96d726dfb1d36de248d3eb8548cabee9d6d4e47eaeca2cfdac7072e19e1a8184bd50d293d66488e6e46dba0d6b4bde9cd294e522c242134409e780682581bc3d85c6d0d756a9e36e957f342b464c80df5f5b2c5cf66a7f075308ffcadac2cb98f63ba11d4ed79e10eda397cfe78627df00b7f7cd44ab11a9bd9f20708182ddc1c3309304b7100e28c13b15d77f8607989a59bba5d60318eba47622322", @generic="a82a59d54719c3cc7a6852da625c74f3d932935dd3795801278ced0c2cf7c2ea83c01f87c49992600ff12bfb42f39c782a56c4c86ec1cf1db687d14c56046e4356773b76d8d768e4175396cc4e300ce2c2ceb57318cbf0fde4dbe0886de76060d19a960788188c5e9170559cee710bf60743e1ce3b99a754ac9ea10d979d01313658aff92faf505cc59164d31fd08624f9fc90a11a9f8af587400431fd716f5168a69883dc2b2d221da23951f33fc0830e6d226183355ffd4e146457595f7a02e02012abb79f7eb75eba98611e5f31d9ffb661989b93444731261123f28069ab", @generic="da358cdc6fe6e0e725eab9843e9a39d178505ac03105b577d624fc15501050e6851768067227ed36127ebf16bff8627e3ea5966b87ccd73b55f8d419c2d8c10fb4ba16646b3a6a41e057af265310e97a5815d7f71aee5a09c986de98e6a0011e5f9b2f2e30202d111cec64c327276c53effce255a62c7d64d1d6d3c31104d44e968363b2535f4f886e83616b641da351843afa74db1d6769f8851c037ceb7be46fa6523152f3", @generic="034e72041c0a0d3cc01b8b7c3745a1d530c40ccc33d1e51d97f269fa3c1194e8ca08885ee86a5efb1acdf15b5751facc7de00899f080db1d7eba13848a8dccb8e3044d18702f67fd98596f597e66e9b142c7777daf0ddf9fffe422b38e0dc7e7d8b06a36d447dad3fe56c11c0d5fe6697d067d5c9b084746e3ee91aa88f9f82c3aec0a0a45c215b6ebbf597ca2b6e9e3bfab79a622b273522b1e78796105533ace5a520acd583ee3ff6c30ff452d7249f9858c43861a19c6c915b9832d9fb781c1e658218b3cbc7cbfccbde97782503413"]}, @nested={0x14, 0x83, [@typed={0x10, 0x16, @str='/dev/vbi#\x00'}]}]}, 0x4bc}, {&(0x7f0000000900)={0x1154, 0x2e, 0x1, 0x70bd28, 0x25dfdbfc, "", [@nested={0x18, 0x5f, [@typed={0x14, 0x26, @ipv6=@remote}]}, @nested={0x112c, 0x6b, [@typed={0x8, 0x3f, @fd=r1}, @typed={0x14, 0x6d, @ipv6=@ipv4={[], [], @broadcast}}, @typed={0xc, 0xe, @u64=0x6}, @generic="6455e53584701f2896ace8b635eae33a0982c9eb71793faefa3e89daa9f4933fc5584702d2dd6dcbb7ff2c79debe46b1daa93e8a8ccabd69ca7b42ebdfbeed51528bb4efeb2a586dcc556a76b7373b170842f085785c844b0fe67066aaa0732946bb37064b9174327370dbdb17e02c525d037dc4267c589369218a47bf39a576db7dd737687271c1d4e4c63ee4d6ae94cff3298e3dcecfbee73174477aa74ad4509b470d9f5e534ceb3774479f43202db3648c995cd89f9640ee15e649ded612e98b8407352ff20fdf815fa59115ebe02f979999b836ce477cc86acf2b20349fe9c3c84eaca4e87ec9619adb509d5e8c1e633a8f86fd4a03ade1888249ea35a672054105c28bc141f569e97802b7fefd9eb2c8e9528e7e5ce9b23765ed7b8cb86ace8f961e435f5d45eca78417bb887b09cde1a5ea3d3c69e684f087d02fb9122ebab2d77b0da5dbe7848fc6756d8ba63557d9cd5f1b92550526c5c4f51e21ec5acfba6d34863c234af40823f5b8675a02f6256eda936b4831ca32f8e877c695d06481d95f2ec39e7658b234d0b931d2b0c887e17c2a8727ad933d42e09ac092537b6ccfb1ef4222e906a9eda980fb84a2abed52dbf89c374c5768748dccb66a2639f1cf2077f1666056a89814e99557d4d0e3a69271ec6ecfab3f481d13661ff3fedc05eb387869503c763adeaa78fbcd348a659245d50a8ea5c674bb9cf914f264af29b4c4286020793c0c4f934ce192949a6fd873cf14726bdad152c6f932d311439165aa0e647012b1da35bb8e7cbea7755e3106885d46cdddf55a35568b4a34353b9e68af237d8db073537d1da351b692c3b54d5dbb920d934fe9a108effc1a8c5d3d7f442901eedcfbaed8582a6f24ba2be774343662d3ceb21888f72cb349f8f84b485e22475d4311b72f28a13f0eee0da31d988e1ab84492f3bd0a835d65b8730cd498547d180af5791bb2c9d54400e52c353b5209596d538e1ca9423fdab138e3502b10a827337f54b91f136da3fd174b780a5b87ea9d68d2ba5f71d5ab074b180433c05295e9231fcba836131d8d19d3bbf7609ac484f1e2287ec896154129c3e692c14103ed66b8dccaac797ffd0c01545a684f356085ea26a6356d169bcf9fca83ae96d1116be73da729c96cabfcc733f18b2ddae2ddfb695b774087f622031a8552bfe0a82d93b9c174ee85c3bc39e86b5c040510fa5d882390a892bb554f768f53257c859606e89ea7a1c404dfebbcdb2ddb3854ca763b91c3f8febad86e47d17a230a58e66ea00400f995efe23587b144a738e514407142565cf2e66a1b49f87f13a97fb9ff7e6440da3632188e9f2a9d7b43dc00149a080d988fb2356b68588546117d620cf577ac3865488bcb4f995cdbda1f1cf71b4ff078ee7d5d460f1780b3391f6d21048c0f3a5d8d8476a02ce15390d8cabee05dfbb17fed3e0916dde06644b12d71ddad217383671d215f1dde18a9787a336e46f1e56a4e1d83f3bababef7ce746f807e7a0550bd2e408b39525ad51a2f7e4e5d9a27a67196353f9c41c8a415c087736428abcaec8867d82414f8865563ca8ccdb4d89dae788061498cd641115f8da96ab625420294c81e8b01beff4ed75c001a71b8e555698afa214c3f8c13898605b84f6b6e5decdff7a5174800ffb21bc42b4f352fd18d4be5ab2ed257ab39925e14930deeb59bb778058b8ca6f9695b086d605a67947097d2c82b8c573e8bd86cc5773153bb9aa9a09eba5915c495ea03222af5315d94d32a72e0ba1eebd64b1fbc8fff67fc217ade9d3239f8cb122a2c88ea75f2d09a590ef4aaf95e8652e571a93240b26519734468e73ad3973f491b1fedfb24bc4b6e4c70c6064c29cc345282b395e3819a968e4f42a55c5fa02fcef153260d9cd632744b8ce843f93afa268470b8b5bf45512ca037054c95f7e9063bfa3dedf4af6ff9996518e6ec0d3f94384733d6a9b0ccdbca98c136c7fc8634dfd7cdc112a15f4bcd21d3d06a35150329e3de63e21c9d7b864e27216a0ef3e17cf8d761906006654a64f8f02d926bdc391ad4f9ec0a75b741b034e25109c1b5efbc26c943041247cb2a08123d0051f9af0e245f477f2c73ffa364e022b5c66a2fbd75ec2c29e17b1bc1c4b1fb3336ef041cc0e514931c846f19199f332c488e761881e5d1176a735eb0dcb9b2cb908f6d6321a70b5e3983ac70edd55e9aedee7e42c2f2e7d181ccc9aff8b736a335c0c7585344b0879a07a94ba1256820e78342faa21241c8aaad0f037bc4c981a5bcde2cb0b39112765f559e1cc00db81a582235f0a5f3c95b2f0d077bb77907d59627af7ea50b150f8dd8b20f90601f7b86861eb182f42da38796898f90ab367c05aee5278aef532c989e27f7eeffe883729e518a4ffa175c39bd4ef23ce2f182570928c3c3eaf7382b7a42eb4d54f81f399111b883716d6cbe4418f14642dfb32b6c14ff285d0b239d488a2956ea99006b6b67f479c8d17a4ebf3f30776aa8ba7fba9b2bd2d80c21869363c1c46316f7623e394c91726078c7b34171c5d8c58b5c218306368189906fffeb57d5220dd3fdefc8cab517a33002ae38c72c613706b265b0957d8c90721f8722c5bd4d20a758ebbd8ab0d983b20de8636a8dfcb340a41241619f34bba648df48fb47d6f4ae2da6531f814eea206b094efca212f32ac48b63e755be670ec41647db13f7c323f48423d33af079627f53defe385c9572fe391b02331d8abbf2c93be5ef31db056e58d5f2c46022c77724866bf128fa0f07e2560649944b44fc71c39b8833cbf7be524716b77359f1d1909328d85a938d5780c5e862333e483657054fb842c913930239d511cabd57f0bf1c5b938bff9c2a4f49cbd696654d019ce6619a865d89377791fcbb32de716beb8b54ef57cff3307c1332389be817ba77e723c2ce9a7b7a18484d4a3a93d05c9a07fd94d57406820c1327123444162fa61219eae228a1366fdb9cc2a76e0b8ee04cd4c0f08310ab74aba29e43f508212701039db94442b6bc932733b79f2f05f8bb02ad1367831b90c7fb2adf886dcddbf7245a3c00e1a9074e55ce264033d7730fff11b72d83ea4dd76883c28a800bcaf40366594419b5f8dc2e43fbc738cbf545ffaf71d697e39a098983d6d7811c16414779a94253323dd2fcfa13f07b5103ec7b159008621f6dd1ec21cd82e6c984a02389f7d61913763247dc8fd7c5dec0e796faeebecec2782ac3c564f656f518b60a5a7c0f723b7bda99c5eef29f0b4f8f23438c08b5935f3a55e7b36b0aecaed6d9a8e8760984423597a3a507a75bd2692d66a282c6e78f1871ab555d3119e7c35de72ed6e072ea018defe4af92d66fd68a83929ca75bd19bae75cec8f49ef1a21038d7e8e64fe4c13c15febbbdbc6298c7dc6345a1633ac3c9a9bc470f2ef0509125bae66572e35b7c13cd0f8a1c05a324859243b247599ccbe25f985fbbfa38cd4c325e856fa8d78741077498686f3482001a99e92bf75a7b62ffa20f1814f08cd6a31f043d37ba8ad76ef7428b6b12e45a6cd307de952528ba6121b49198deff73d8b3fde643400bdc9a2f0239a782d9801e6ad4532f786665674bca8f19a6d6c7d5f32d26976bee24e72c6e7b7c84a832548c17559182232e1132ef10ceeb18560f84c708da75f1c840a53d9a7fd6ae343b75ce8a492a97cbe1ee3efe6121216f2fb515c82164293b68ad4ef0354257e9e7ca0030bbb6d7235531b02fbdd07110e01bd41fedce56e1544034e02a46926808ca19636316f9d8fd167534a3865b9576dec0b9ac870d033c8ca4a935ede56799c16972860a6db158e43f302f1e8d06ad33792123f65f73516b264007cff9bdd04209fa1b4a75cb361095bf6972d23c455c50a5bf1e8d32022ea708d4169e9f3e263a940533e46a5fdcc41e838f6d205a4e7d0e2debf44ffa95f927a197efb6a05c9e4abdabc4ce671a3bcc2eabe932c5371fcd305dbc612d9f16c0d41955489e6dd7c83020efc5fb694984bcc3fd5175a7bf55288d7c371e8d83f3fd4a00a85f71a334d9c796bf4b266fc13ba360a60b558945bc910726a3a7ccfee6f81c0f2efd788df3e52a8e32bea366a7409cd4f959067c0a547cc616f43c00bfe014fd1995af335942b50a4c5e2de2b604ee7adf114f5b98faba9fe0a472489dd0ecfd183cc64fd21d3363616ea68b6c93d5133d7933547313fa5161ebbbaf07b9a220a3558f4bbcd16b2d3c450a18e31807d0a6b691eebc58607487f3ccf857304e3581e6c08a6989c84a7a115c9859653b5886a3991ef08246b27aeaf8cac1a71500640c96d6abf9ce53e85a50f4606ee4211526cb462245eccc430083aa01b0ac03cbae631728acc0bb043cb82ab160f0f867a2ab0f82bbf85dbd3ef5b497a01d6a257d86557a5048de58d31e1cd1fdbdd95b5c57e775e5a431ee4d60164314247f11e0a9b8be22f66f726d36e6a5bcbff1035c240ff9e20911bba13a1feb4f73f16010ae97fe2d828df805050bebd8372381e09d8aa94b0bf6af89f9acb965382af0ad9b99862fc69c8d1ea3d469bf401cb32d05e7b4fc599c10af5fdbcdc47cbdde3da9ee0a4b374f83111a787f78ca823c77747d1a13b2bf6d7026355e76800f9bbf19f504b6305d8bfd28707eb2c6c51441a06c12768d04d71eba92853eccd419f0161f285d349e97b91a27e94fadc333de2eb9cd0a6c1fbe0f9b57c3592cb4641e21e791981022dcd8bfec1dd4ecf1601b542336b6dec3e9ac458c414f002f1fa236b0426725583a825c784405c178b8a28bb4406e9f437352fbc0b4c1b35e35faa7149239b30c4b2a1a8fc22d46e9b730aed9167a84240e892e0a00fa045d5fdb245530e8a7057a0425f6e3e8a1e9991f66d7257a65a11a7cf80256ec80969525157751400a561d1e4a34501a0b437f79f2582b8e5669445a1d89cc85cf6f192bbbf8ccde8a8c5bb415061c6a987517e4b9b34386114d44c012da599475e418ebabcec0d01efe1e9a53dc394df15f21eb1bb2efbf551102fd46c6416bb0de01db90728a45d9ee737daa26255b51094e4c44893323af9589526821e18b6f5018c32aeb8a3837a865c9277e6fca2ad26bf60cdd3ff10d9816a9d1171d6b0a6ed820a6bdacfe0159d446449ef27ca787d2b9c02632881aa042334d1e1f5a0526844e7937ad0fc1879ec4465b2f99e3c9850140ca597e05f60cced51c406e3012981a48d685d7358960c7b4df6bf1f36cff0aeaa7102846654470b9bd970052c7662074e0276e58be743999caff13c5dcf2ec0c8a5cf671f9a47d358e4874991c232932b17a22fdc8d77a41c2468c77d2cb3d3ab4dad6ef462d95d301568f5cf886c67cb8e1c6140a5249cbfeb290b8f7c5b5755419cbc6ce8817470d417177e10dbc84a1e1b65ce32fa6d2af858287630c07c3456ee4e2ea9dd25977eaa2183047f73b4fd56a7233a7a4cbe899ab0eabc78d4044ff3df8a5198bfe86f5f0dac69285eb1193704f98963e1a4fcae4301faf798db8343903d8778ed9cadcbe51c177e9d9e9846727b1595d5a366dcd1d3904b3084641192f8096391b09b55b4e48e8a6e8d2626aa1e2cfccbbf2f02d60902eec3d7e8d649a1f35a653f52e6c20130e36ba2d0e368080e7a0e8fec259790b6af2d4b54fc7b1cc106ffa4d8bb372fad69a009ec41002bd24bf0df8bb8f5e504dd202492bff460c51058542bd4be9d6aef0926b9c82dc6a4a538cb7e9f879f518ed9da13246672f874a4c21ea33264d1cda2cc7952422e3edd34b97274db5f75b0015af3037", @typed={0x14, 0x44, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="83182f1401ab7fd6e7b7b7f3b97f247c0f8f2697725b00141d3c16406c6837d4e650fbb1ad37dbd1e9815196dc045bbb7bc332fa40ec17fe0d28765521b5ff252ec89f0ebc730c0c34fcb104c27e3cc2dd1e36fc2e9e937f79c1954abeb88bd4df2eb93ef48427c36f03b78ca1e4d95efb9b39b1d4aaea7c8ebd6f6679444572d6f4f3cccf5cedb528d6c3b334bf0858c87ffd5ae42981c5114f509056cb29e66f7cf7fc17645a1dca060f8cf9db4e67eca2f66b96a988206188a7d306e4f133b0b8e9e09897a393e2e720da041023b83cbfdf168dcdc40f8b04dc6920154b35b00f", @typed={0x8, 0x43, @ipv4=@remote}]}]}, 0x1154}], 0x3, &(0x7f0000001f40)=[@cred={{0x1c, 0x1, 0x2, {r6, r8, r10}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r11, r12, r13]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @rights={{0x2c, 0x1, 0x1, [r24, r25, r26, r27, r0, r28, r29]}}, @rights={{0x14, 0x1, 0x1, [r30]}}, @cred={{0x1c, 0x1, 0x2, {r34, r36, r37}}}, @cred={{0x1c, 0x1, 0x2, {r41, r42, r44}}}], 0x108, 0x5010}, 0x20c4) [ 960.119186][T24799] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 960.194224][T24799] FAT-fs (loop3): Filesystem has been set read-only 12:37:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:23 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x1e, 0x8, 0x9, 0x20}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000100)={0x1, [0x0]}) bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:23 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x1805000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 960.353913][T24821] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 960.399313][T24821] FAT-fs (loop2): Filesystem has been set read-only 12:37:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_open(0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:24 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x800000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 960.635364][T24853] net_ratelimit: 46 callbacks suppressed [ 960.635369][T24853] netlink: zone id is out of range [ 960.704314][T24853] netlink: del zone limit has 4 unknown bytes [ 960.724165][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 960.729987][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 960.739301][T24857] netlink: zone id is out of range 12:37:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 960.774317][T24857] netlink: del zone limit has 4 unknown bytes [ 960.783516][ T26] audit: type=1804 audit(1571315844.301:562): pid=24844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1475/file0/file0" dev="sda1" ino=17582 res=1 12:37:24 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x1815000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0d7f00048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 12:37:24 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x4, @output}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x9}, &(0x7f0000000200)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={r7, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r8, @in={{0xa, 0x0, @multicast2}}, 0x0, 0x0, 0x0, 0x86f4, 0x20}, 0x98) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r10, 0x4004743d, &(0x7f0000000180)=0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x81, 0x1, 0xf0, 0xa2, 0xb76}, 0xc) [ 960.949931][T24859] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 960.985276][T24873] netlink: zone id is out of range 12:37:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 960.994334][T24859] FAT-fs (loop2): Filesystem has been set read-only [ 961.020041][T24873] netlink: del zone limit has 4 unknown bytes 12:37:24 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x803000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 961.162569][T24875] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x101201) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000300)=0x4) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='URUE', 0x4, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:24 executing program 0: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x202, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1ca0140}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe00000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004801}, 0x40000) [ 961.204175][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 961.204178][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 961.208822][T24875] FAT-fs (loop3): Filesystem has been set read-only 12:37:24 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x1a04000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:24 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 961.406488][ T26] audit: type=1804 audit(1571315844.931:563): pid=24908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1073/file0/file0" dev="sda1" ino=17589 res=1 12:37:25 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0x835}, @in6={0xa, 0x4e21, 0x200, @mcast1, 0x80000000}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0xffffff7f, @local, 0x8}, @in6={0xa, 0x4e23, 0x6a5, @mcast1, 0x26d3d71a}, @in={0x2, 0x4e20, @multicast2}], 0x84) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)={0xf2, 0x7, "539d1fb0e0f2bd699bded9a8b75437777918852c6363a6f15bd5b32fd3d60efab1e6c3df2e11fada78b1f198a32c27a3d7d5bc7dff711814ebeed150ba559f475be92f43b5e236a3abf7dc8ea3b388f97762bf1f12d2d5fe4bba1460bd0ad7a9fe7a2b1bea15fe5f83c688f3ddee7c510ca1292fc6f61581c3e25bf321536787b75c0920c0c17d1abc893bdd7b29a16ef51cd49c1e73360bf5e9412b90f3aae0bab346d2d40e614adb0e6a32894414d006b304b38b13e590be1c83b6be801c45f3dfd57a25f36f43d23dd9e3c0b0fc6d024e43580350b0fc4a2e2bce440ce917b4f02aeb100268302d27"}, 0x40) 12:37:25 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xc00000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12:37:25 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x0, 0x0, {}, 0x0, 0x401}}) 12:37:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 961.731598][ T26] audit: type=1804 audit(1571315845.251:564): pid=24918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1477/file0/file0" dev="sda1" ino=17586 res=1 12:37:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0xffffff7f0e000000}, 0x24048840) 12:37:25 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x1f00000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 961.830270][T24930] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x0, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 961.874405][T24930] FAT-fs (loop2): Filesystem has been set read-only 12:37:25 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xd01000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000000)) 12:37:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000100)={0xb2d7a7390ac62f9a, 'ip6_vti0\x00', 0x4}, 0x18) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output={0x1800}}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fsetxattr$security_selinux(r4, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:apt_exec_t:s0\x00', 0x20, 0x1) 12:37:25 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x0, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x2) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000360029080000000000000000020000001202000014000100005b7d1bac704d2a7d5dbcb368ba5387c096a70d7553000000000173f90e013c15a6b29a0abf45c65afe9eaff4b2b2090c48b72f69637252b30dcb846d778fdcc8415ac1b1559e68c7f5949bc0410819b2e950ba24660e86ee56e17e6da50718bbba64c6cdc79e3d8150b7674622e3de00d5ee23500994331bbd3566eebfb922f1b92a19b374a6e803f3ea3412d4677ffe05aa77ed66d15f39b7476579e21556b5fa2d600c689cf13411b2c0b4d7f4607604aa001072d528db043800217e4690572745b4c52b81c1af6f8c3c3d468a47cd8b0df19a048ee4c02bfbd0bd2c8a17ca07d30f66100b"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:25 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x200c000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:25 executing program 0: ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x200, 0x4, 0x6, 0x10000, 0x3, 0x6638}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) accept4$inet6(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x1c, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x4, @output}) 12:37:26 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x0, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:26 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xf00000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:26 executing program 0: unshare(0x32010200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) fsetxattr$trusted_overlay_opaque(r4, 0x0, &(0x7f0000000040)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_getparam(0x0, 0x0) 12:37:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 962.626709][T24991] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:26 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x40000) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x3, 0x4) 12:37:26 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x0, 0x0, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 962.709490][T24991] FAT-fs (loop3): Filesystem has been set read-only 12:37:26 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x201c000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:26 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x0, 0x0, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:37:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x35) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:26 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x0, 0x0, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:37:26 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x1000000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRES16, @ANYRESOCT, @ANYRESOCT=r4], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES64=r6]]], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:26 executing program 0: unshare(0x32010200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) fsetxattr$trusted_overlay_opaque(r4, 0x0, &(0x7f0000000040)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_getparam(0x0, 0x0) [ 963.263132][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 963.263142][ T26] audit: type=1804 audit(1571315846.781:568): pid=25036 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1480/file0/file0" dev="sda1" ino=17138 res=1 12:37:26 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x220b000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:26 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:37:26 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000012c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xfffffffffffffc92, &(0x7f00000016c0)={&(0x7f0000001680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="08002abd7000"/26], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x20008800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = syz_open_dev$swradio(&(0x7f0000000440)='/dev/swradio#\x00', 0x0, 0x2) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000480)={r4, 0x0, 0x5, 0x7, 0xffffffffffffa82b}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000300)={{0x3f, 0x43, 0x67, 0xff, 0x6}, 0x7fffffff, 0x6, 0x94c}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x5eeb7216845ea8ee, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x5}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000200", @ANYRES16=r1, @ANYBLOB="00012dbd7000fedbdf25010000000c00030099000000000000000c00040081000000000000000c00080001000000000000004400070008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0ab42300", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4008801}, 0x8084) [ 963.467093][ T26] audit: type=1804 audit(1571315846.941:569): pid=25059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1077/file0/file0" dev="sda1" ino=17345 res=1 12:37:27 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x1006000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:27 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000180)) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/219) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:37:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x50, r4, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x3}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x164, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x588c50d}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x652399df}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x446}]}, 0x164}}, 0x800) 12:37:27 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0xc, @output={0x1000}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xfff}) [ 963.727617][T25085] IPVS: Error connecting to the multicast addr 12:37:27 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x2a02000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 963.829674][T25085] IPVS: Error connecting to the multicast addr 12:37:27 executing program 1: sched_yield() r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {0x3}}}) 12:37:27 executing program 0: unshare(0x32010200) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) fsetxattr$trusted_overlay_opaque(r4, 0x0, &(0x7f0000000040)='y\x00', 0x2, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5c55}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sched_getparam(0x0, 0x0) 12:37:27 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x17e92a1000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 963.942083][ T26] audit: type=1804 audit(1571315847.461:570): pid=25089 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1078/file0/file0" dev="sda1" ino=17458 res=1 12:37:27 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0x0, @ANYRESOCT], 0x4}, 0x1, 0xffffff7f0e000000, 0x0, 0x20020000}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x4) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000000)=0x6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="b97d61b81c76822f447f214b9fe1c268a9808097aafb881a7a41e971fc961ce795b93be20bc1f6830d675ea2bc0fcfcefa9dba65abf9efc13191036f74af489cd632eac5fac41f821e0b5f3326ded641ea2d", 0x52) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) setsockopt$inet6_buf(r7, 0x29, 0x44, &(0x7f0000000100)="c5d411028bb265f0fd45153dbf1d1f0bf3ac15921990d2c362c3edf7c331983bc57499cbd09780a3558a88309ba9059cf876a8f708694855e75182847c3031bb913ac40c967c9477a59a8769446bfb528792980b499a0ac871c00242cd330082cfbb4a609338a7f35e2d66d9811b82bb76d4b54283f7ce7ee375339fc19657b17b018c3e26f9f658ce2e8efe6e7c4575d2781cbdb5d90a3ebf47d2d94d508f48", 0xa0) 12:37:27 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = dup2(r0, r1) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000000)) 12:37:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) ppoll(&(0x7f00000000c0), 0x2000000000000299, &(0x7f0000000200)={0x77359400}, &(0x7f0000000340)={0x326f}, 0x1) r1 = socket$inet(0x2, 0x3, 0xa2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x200, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x55, 0x227703) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xf7) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='$/usermd5sumvboxnet0vboxnet0\x9b\xaf\x00', 0x0, r1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000000)=0x78) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000380)=""/173) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000140)={0x40000000}) 12:37:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x0, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:27 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x2a12000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:27 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000100)={0x1, 0x2, @stop_pts=0xffffffffffffe730}) [ 964.358896][ T26] audit: type=1804 audit(1571315847.881:571): pid=25140 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1079/file0/file0" dev="sda1" ino=17602 res=1 12:37:27 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x0, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:28 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x1809000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 964.552721][T25143] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) 12:37:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x0, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:28 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0xffffffffffffffff, r3) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000002c0)=0x0) setresuid(r1, r3, r4) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {0x4}}}) [ 964.612159][T25143] FAT-fs (loop3): Filesystem has been set read-only 12:37:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSIG(r1, 0x40045436, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) [ 964.737273][T25170] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 964.753424][T25157] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:28 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x2c01000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:28 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x2bde25381709221, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000002c0)=0x2, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000300)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r5 = signalfd4(r4, &(0x7f0000000000)={0x1}, 0x8, 0x1800) r6 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1400}, {r5, 0x200}, {r6, 0x410}], 0x3, &(0x7f0000000100), &(0x7f0000000140)={0x9}, 0x8) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000380)={0x1, 0x3, 0x1000, 0xeb, &(0x7f0000000080)="bc3bc697e0ae0333240c54d2df35f75ae93b9351e3edb84203ec1c06e63c2d4a05c6ab000f83a9e6e2c0d6fdd1ff45996dbf96125f93acffddb7ab95fb363408e16962e8cc28d1367aafbcceb155ad9f31e1e8fa83c1a9d5619f07c0cf73ebccdf048ed0e96ea61470cfce5024e86bc4042b8b2462998dda571e1d301f036d8d35084ddc546be93028042829c5f5c56b27ab0bdfbeaf55a8ce6f40c5708f71123a6d92632c0a0c08313c518ae3daf3bb4dfccbb269be22ea3a251cfba497ea80029d8d1cd6c5d013decbab299b2ae810fd2cb6e40423a39ca6cec81571afd05a7665870ed8ff28d732037e", 0x5b, 0x0, &(0x7f0000000300)="61351a425eaac73183192d649de51040d95e70a7bf4bf32239d28b84e7b3d16a38cb210c028ca32a4e0e52384523387fef7b8df57bc3e60e408f00c79726caa8fdb1260ffbf0506d8fd1a3db6781b9daf4ddbf6b88e929bcee6f55"}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 12:37:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 964.791002][T25157] FAT-fs (loop2): Filesystem has been set read-only 12:37:28 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x1862970c00000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:28 executing program 0: 12:37:28 executing program 1: ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000001c0)={0x6, @output={0x0, 0x0, {0x0, 0xfffffffe}, 0x0, 0xac2}}) 12:37:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:28 executing program 0: timerfd_create(0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r0 = memfd_create(&(0x7f0000000080)='cgroup.procs\x00', 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000009c0)) timer_create(0x0, 0x0, 0x0) 12:37:28 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x3209000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:28 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x10000) 12:37:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x0, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:28 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) [ 965.344310][ T26] audit: type=1804 audit(1571315848.861:572): pid=25206 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1081/file0/file0" dev="sda1" ino=17297 res=1 12:37:28 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x18bcf90e00000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:28 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) recvfrom$rxrpc(r0, &(0x7f0000000080)=""/197, 0xc5, 0x10000, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @local}}, 0x24) 12:37:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x131600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r3, 0x101, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x73}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x48000) 12:37:28 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x0, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 965.493583][T25239] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 12:37:29 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x43d, 0x0) fchown(r1, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000000)=""/62, 0x3e, 0x100, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x43d, 0x0) fchown(r2, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000140)={0x10004, 0x0, &(0x7f0000ff9000/0x4000)=nil}) tkill(r0, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa192bce5e2dfb86dd60d8652b00140600fe800000000000935576d5115e4525aafe8000000000000000000000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500f000090780000"], 0x0) [ 965.585365][T25239] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 12:37:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x0, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 965.628178][ T26] audit: type=1804 audit(1571315849.151:573): pid=25231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1485/file0/file0" dev="sda1" ino=17282 res=1 12:37:29 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x3219000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x582bb2a9481c6009, 0x4) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000000)) [ 965.807539][ T26] audit: type=1804 audit(1571315849.331:574): pid=25259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1082/file0/file0" dev="sda1" ino=17605 res=1 12:37:29 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000002c0)={0x3, @output={0x0, 0x1, {}, 0x0, 0x1}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fsetxattr$security_smack_transmute(r1, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200604, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x1ff, 0x1, 0xe8a]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x40004) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x68, r5, 0x65457ec0d596f20f, 0x0, 0xfffffffe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r7, 0x65457ec0d596f20f, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0x292, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x1c, 0x17, {0x16, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) [ 965.854186][ C0] net_ratelimit: 60 callbacks suppressed [ 965.854192][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 965.865704][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 965.869630][T25271] netlink: zone id is out of range 12:37:29 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x1f00000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 965.913574][T25271] netlink: del zone limit has 4 unknown bytes [ 965.924143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 965.930002][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x0, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:29 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) [ 965.955188][T25271] netlink: zone id is out of range [ 965.978481][T25271] netlink: del zone limit has 4 unknown bytes 12:37:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}}, 0x403e000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000080)) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x24a, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0xffffff7f0e000000, 0x0, 0x4000000}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r9, 0x111, 0x2, 0x1, 0x4) 12:37:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:29 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x6, 0x7, 0x5}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xfffffffb}, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000180)={@empty, @rand_addr=0x1, 0x1, 0x1, [@local]}, 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r6}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r6, 0x7fff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r7, &(0x7f0000000140)=0x4) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) [ 966.249850][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 966.255733][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:29 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x200c000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:29 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000140)='eth0\x00') [ 966.282482][ T26] audit: type=1804 audit(1571315849.801:575): pid=25295 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1083/file0/file0" dev="sda1" ino=16882 res=1 12:37:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000140)={{0x1, 0x1, 0x8, 0x0, 0x4}, 0x0, 0x10001, 0xfffffffffffffffb}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xec) timerfd_gettime(r1, &(0x7f0000000080)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x701802, 0x0) io_uring_enter(r2, 0xff, 0x401, 0xb0b85e2a194c9d09, &(0x7f0000000040)={0x8}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000100)) 12:37:30 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x3408000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 966.447172][ T26] audit: type=1804 audit(1571315849.841:576): pid=25284 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1486/file0" dev="sda1" ino=17605 res=1 12:37:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)={0x0, 0x3, [0x0, 0xc0]}) 12:37:30 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) sendmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000340)=@l2={0x1f, 0x6, {0xd4, 0x0, 0x53, 0xf, 0x0, 0xbb}, 0x7ff, 0xfc}, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)="5d7ffe1b49ecc740b3b857fa112e947ae43ac91739cfacbf083767f2a1df86d60472cd83b7e58416da43b36f59236b8668e20dc965a159d9998d9157fc3f8f9227f7ff4fd30e6f154728c068f2377177841880d14a35b4fbebe482563b4a42b22a6e925bc47fa7f9", 0x68}, {&(0x7f0000000500)="e20b40d224f495926364703f4ce223cdd72b41b16158df563f4184ef96f96c5b6d613e7d864e90ae2e3b52df33f09e69e37a58dfd10370b432328b8810d1c9679e971374a7160ee889585a8663a2336d18334183f6dffa723d496bd07c21ee6d309608d0fbb7a424ec9c8c0281fd402e8d2c80135c0d18fc4684623262afa93efecb25df069d410899aa534a1003026d2015c25a226c52dfd932cb1e757cc6fdf0d611efe9172039085e42969939e5368fb01f1cd9d1ab88601d032ea639db", 0xbf}, {&(0x7f00000005c0)="736b1d2274c9d1015c8e33a6ae9b1ae0e2640c1877219d82b15948d7b6546a0fe8b045a10daeb956004feeef8ab556fcdf2a5bdc0818c9bb8359ce09212e171de6fa0e5ceeb8ead0f04c7d660747353054a3fcf28d05c30cb6ee1493bb7deb9ef1f007640a01cde6ca4f1943566b536355f36bd009dd9c28ec4c9522a6bf976a37df7886f2a0716b5d", 0x89}, {&(0x7f0000000680)="ba4ed1bb6d15c711d2ab191c6ba5856a7f10442cf48b1e5f612d6fbaaaa9704dffbfb80d04f0cb66bf7a83a2f2c7351bda720a84639e008cf6b1af769d4e8ad9e9818cfe727b8ebf26f8ef4b608a4f4e131ec58e7ce5065226e568d84f03", 0x5e}, {&(0x7f0000000700)="6de22938b9e8493c761db809c095c3270c03599729ca286d3ad168ac17a7abb5b5a23a297ee60ce4842b85c491d601557c4d35990cad626d9d7249f93f619e56777d6154500ec59f29f7a61e4103a74784c785915a0f95a6205198684362057014d0f6a3bdfe8129726fd0540627c11a77a1599cdb0cdfff576a65668f87a12512792a2d8418fe635ad4db56df964203bf5d8bd4cc788450db28d1dde8387aa4fdfae2ace90ae7194e64f11257f50d1e9d59128d92095da435", 0xb9}, {&(0x7f00000007c0)="b887a838563c85de55e4fdb5a06ef3a940a3dda96c20f68a8a3f5c15eeb6d68125b7d485bdec636334a1704129e43afeae1f53418818a0731a929da7af5149d1c32d82bb2b52071173c400c5632fd3a8cc25749eea03eafa33718c", 0x5b}, {&(0x7f0000000840)="aabb8bbdd5f1b439836df437e224b3bf349a", 0x12}, {&(0x7f0000000880)="eab480c81a2f1b28157e2e7fd0d494d96f76920f90bb78ff4246d03e686fbc289b464d8e513e682fffa8883a3cb77ae8ded635e7a16a2bba1e063d54c70e7c3d54ce9d4361c1df724bfb73cc5f88add5", 0x50}], 0x8}}], 0x1, 0x4000000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12806}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f0000000300)) r6 = getpgid(r4) wait4(r6, &(0x7f0000000080), 0x8, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@loopback, @in=@multicast2}}, {{}, 0x0, @in=@local}}, &(0x7f0000000ac0)=0xe8) readahead(r2, 0x4, 0x2740) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 966.758643][ T26] audit: type=1804 audit(1571315850.281:577): pid=25333 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1084/file0/file0" dev="sda1" ino=16577 res=1 12:37:30 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x24}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x2, @output={0x0, 0x0, {}, 0x4}}) 12:37:30 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x2301000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) 12:37:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, 0x0, 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:37:30 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x3c0f000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000003c0)={0x1, {r2, r3+10000000}, 0x9, 0x80000001}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2200, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getpeername$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) bind$xdp(r4, &(0x7f0000000340)={0x2c, 0x12fd0927da8e1fe2, r7, 0x3}, 0x10) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x480441, 0x0) ioctl$TCFLSH(r8, 0x540b, 0x400) r9 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/216) ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f00000001c0)={0x4, @raw_data="089933cf75ae8e875acdadac1ca64a59b0dd9097dac8da51513cca6dcc92a57719ea98d2edf9663839cc52e4119ee0c681e087cef702b862da77752f06659d9ea802fbe03e257666edd7616f1afcb025d349867b2b76a41b3dc17f57027bbee6687fe9e52d1c1a68917e896f85cc8a43d992e49fa9318872c1dba332324d5fa7fb25f6a44bd74de186eb7065f53b9c7c24777cc97fd809f005fc3c988aa855f243220320138639eed62a636c7150a7bfc0408f4e3c9c03ec305c85910e7bc5bb5e598e5d978dc855"}) 12:37:30 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)={[{@journal_checksum='journal_checksum'}]}) 12:37:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, 0x0, 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:37:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x8, @local}], 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) [ 967.248709][T25385] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 967.262733][T25382] EXT4-fs (loop0): Unsupported filesystem blocksize 0 (1923657432 log_block_size) 12:37:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, 0x0, 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:37:30 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x280f000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:30 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0x800}) 12:37:30 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x3f00000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 967.293167][T25385] FAT-fs (loop2): Filesystem has been set read-only 12:37:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b479a7316270146d0e02f8e63ba8863cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@data_journal='data=journal'}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 12:37:30 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) [ 967.556107][T25410] EXT4-fs (loop0): Mount option "data=journal" incompatible with ext2 12:37:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:31 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @raw_data="6c0c5b307f6525cd32ed228d9980626b31d69971d8500ff452c6e32dfad56703fbf565fafe332644646b44f2d62d9283bab7e7408cf56cb1a4da19869cef2011c5d5b44f141a4efd06fc94f4491bd9477e8bbb80bda9779de939f656c471c03ee5365fcec515f82982990db0a6487346232415b6cb440d54b9c4b9c0c0fde668b98047d57071aef85d913190297e1e13dcc9b10f14bbfe0883b6f934271595cec28d8c9f03659abd7185998f1318bb4be4399d69b4cd4d74330b7816781d37cde11a443927067c61"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x401) 12:37:31 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x2b04000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 967.698806][T25410] EXT4-fs (loop0): Mount option "data=journal" incompatible with ext2 12:37:31 executing program 1: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) 12:37:31 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) chdir(0x0) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:37:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 12:37:31 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x4000000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:31 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet_int(r1, 0x0, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 968.030117][T25447] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only 12:37:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 968.077135][T25447] overlayfs: conflicting lowerdir path 12:37:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0xc) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x400200) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x3, @capture={0x1000, 0x1, {0x5, 0x8001}, 0x8d, 0x7fffffff}}) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xfffffffffffffe01, 0x10080) bind(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x3, 0x2, 0x3, {0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x1c}, 0x9}}}, 0x80) [ 968.206793][T25458] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 968.233953][T25457] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:31 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x3307000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 968.271885][T25458] overlayfs: conflicting lowerdir path [ 968.283391][T25457] FAT-fs (loop3): Filesystem has been set read-only 12:37:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x100000a) 12:37:31 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x18d002, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {0x0, 0x4}, 0x0, 0xbb}}) 12:37:31 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:37:31 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x4406000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000000)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0xe9}], 0xaaaaaaaaaaaab94, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3ca) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:37:32 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x6, @output={0x1000, 0x0, {0x80, 0x6}, 0x20, 0x7}}) 12:37:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 968.754760][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 968.754768][ T26] audit: type=1804 audit(1571315852.281:582): pid=25494 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1088/file0/file0" dev="sda1" ino=17637 res=1 12:37:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:37:32 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x3b0a000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:32 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x9, 0x1, 0x9) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001d00)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000001e00)=0xe8) sendmsg$xdp(r2, &(0x7f00000021c0)={&(0x7f0000001e40)={0x2c, 0xc, r4, 0x2}, 0x10, &(0x7f0000002180)=[{&(0x7f0000001e80)="d0ff25d916e182538f15cf216a2e50e35f0d11c47bb8d952ca435e9a8937d964ef03d43c4126ad90928aca8371cb5b99a719ea10d015bbd4b498ac2b741e19e232658fea53f8bc51b3976cc4652c1f5e76d0648e3c3055b0833ccc6ff37161a085f0611c3c45b1ec51eb48f2371c15b33d24feac79422639c8c019de9631c10e7c4f0549032179c416d24ba5f81a652d052129d1a638f0325944f899a6c6003e598815964cc7b7101eca2be15fbf07e3f3cee7ba2ba544f1c8810b5cc3238c02869c65fe9cbdff00a1be9d5cd3f74fff1f3c178f2dfc9575b43387", 0xdb}, {&(0x7f0000001f80)="181eda62a020b2cd2c5c77c00296c654da603bb8f26ca9ac627b839a202a2cd3dc129ec31ed383011fa6c0836e71a590068114afaa9bdd6d3893ce7d061e5cc7dbb50c4250c66d43c03621d41a7443f06279dcab517bda17a6580c72dd875699b4b720f0fb250153aa9446b8162b8f785724e2ad9d7379a8cc29127f5f9ef7575a852fd5016ffa748057", 0x8a}, {&(0x7f0000002040)="6bfb1c4ee5bd06359d1d16f24e96137747e5f1dfde20f2fb5da57bcedc5a11918e9e9c8081b362525b9f7d937da18f30dfd969bb7c2a3c6681b0eeb8c201c1a65a9a1f97fa3a768b7a39e2954a5239c3347ce397188e96e78b212d2dec64446b587fcb89b7797ddba57aaf5e962f2e5622fab26710a9c7930177f669a66628a859205d079810a778a612e3fa4f917514e481b9a30b730701d3528ff362a9e15b164bd4807c71b0ecd640430ca5569f8fa957b5b095576749de99f7dbf68b4bf82385bf8f25ccfec12db025974885a7c9ad", 0xd1}, {&(0x7f0000002140)="2df9ff03d20a49a87ec8d8e33b20ad95b29a012f5265181e92e713de32d27f5427240887b454fcfb5c3fe1a0c9cd473bb99240997d28d4c64a9b77", 0x3b}], 0x4, 0x0, 0x0, 0x8000}, 0x4) 12:37:32 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x4416000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:32 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x177) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 12:37:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) 12:37:32 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000002c0)={{0x2, 0x0, @reserved="3cbe7cc8dd7017f449ba8ed1b066f8077d77b18ffef08b2b38799e543e66d116"}, 0x5f, [], "16394d8aa1105c0ebc7427787f903541eacb625b33904670e6052e4610c7f95dee5bc240382904e37104655d9f03f64d1bba6ec8f596e4ce88224d7be51c45cdeb21186538545ebffdc3679a7784a8493dfa375af4a8972958ca1f95e7d3d2"}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$P9_RXATTRCREATE(r0, &(0x7f0000000380)={0x7, 0x21, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000140)={0x1, 0x9, 0x1, 0x9, 0x80, 0x5, 0xfffb}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x25}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) [ 969.170980][T25524] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 969.195429][T25537] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 969.199501][ T26] audit: type=1804 audit(1571315852.721:583): pid=25529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1089/file0/file0" dev="sda1" ino=17075 res=1 [ 969.233910][T25524] FAT-fs (loop3): Filesystem has been set read-only 12:37:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x5c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x28, 0x2, [@gre_common_policy=[@IFLA_GRE_OFLAGS={0x8}], @gre_common_policy=[@IFLA_GRE_IFLAGS={0x8}], @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x5c}}, 0x0) 12:37:32 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x3f00000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 969.292341][T25542] batman_adv: batadv0: Adding interface: veth23 12:37:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 969.378839][T25542] batman_adv: batadv0: The MTU of interface veth23 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 12:37:32 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x4605000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 969.451743][T25542] batman_adv: batadv0: Interface activated: veth23 [ 969.467553][T25550] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 969.476704][T25549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 969.486554][T25550] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 12:37:33 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x19, @output={0x1000, 0x0, {}, 0xf4, 0x100}}) [ 969.535005][T25549] FAT-fs (loop2): Filesystem has been set read-only 12:37:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) 12:37:33 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x4000000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:33 executing program 0: socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x000Y\b/\xe5I\xdd\xdd/fu7\xc6{\x06\xa2\bW]\x05\x7f\xfa\xc3\xed\xbdA~\xb1\xb0+\x1dw{\x12\xd8p\xf9\xd0s\xc2jP\xdd\xca\x9e\x1f\xe8\xe3\xce\xc7\x05\xf7s\xd6\x19\xadj\x90N\\\xf3\x86\xbb\xa9}\x9feIM\xbb\xb7b\vc\xe1c\xf6~}\x0f\xa9\x92x&T\xe7\xc8o\xaa\x86\xfa\xee\xda`H\x87\v\x04b\xc5\x9f%\xd6N\vR^\x13\x84\xddE\xe9', 0x7a05, 0x1700) setsockopt$sock_attach_bpf(r0, 0x29, 0x7, &(0x7f0000000200)=r1, 0x9ebe5b9d47df9f2d) 12:37:33 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x282001, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0x9a0000, 0x3, 0x2, [], &(0x7f0000000080)={0x9b091b, 0xf2b, [], @value64=0x2}}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) [ 969.818176][ T26] audit: type=1804 audit(1571315853.341:584): pid=25572 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1493/file0/file0" dev="sda1" ino=17186 res=1 [ 969.872232][T25568] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:33 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x4c0d000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) 12:37:33 executing program 0: r0 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e30, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2202) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000340)) [ 969.935152][T25568] FAT-fs (loop2): Filesystem has been set read-only 12:37:33 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x430d000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:33 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000100)) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) [ 970.209650][T25597] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 970.268906][T25597] FAT-fs (loop3): Filesystem has been set read-only 12:37:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) [ 970.298301][ T26] audit: type=1804 audit(1571315853.821:585): pid=25607 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1092/file0/file0" dev="sda1" ino=17074 res=1 12:37:33 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x8010, r1, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:33 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x4602000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:33 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x4c1d000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:33 executing program 4: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0xbb030000, {[@rr={0x7, 0x7, 0x0, [@loopback]}, @cipso={0x86, 0x19, 0x0, [{0x0, 0x1be, "072f03915481c57cf89847"}, {0x0, 0x6, "f3b95549"}]}, @rr={0x7, 0x17, 0x0, [@loopback, @rand_addr, @multicast1, @broadcast, @multicast2]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 12:37:34 executing program 0: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) lstat(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) exit_group(0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 12:37:34 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @capture={0x3000, 0x1, {0x6, 0xfffffffa}, 0x8, 0x8}}) 12:37:34 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 970.676098][T25628] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 970.724016][T25628] FAT-fs (loop3): Filesystem has been set read-only 12:37:34 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) close(r0) [ 970.753064][ T26] audit: type=1804 audit(1571315854.271:586): pid=25646 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1093/file0/file0" dev="sda1" ino=16642 res=1 12:37:34 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x4a00000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:34 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = gettid() r3 = gettid() sendmmsg$unix(r1, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x70}], 0xfd, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r4, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = gettid() r7 = gettid() sendmmsg$unix(r5, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}], 0x70}], 0xfd, 0x0) tgkill(r3, r7, 0x2a) r8 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:34 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:34 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x4e0c000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x3}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 12:37:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 12:37:34 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 971.124415][ C1] net_ratelimit: 24 callbacks suppressed [ 971.124422][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 971.136304][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 971.241532][T25664] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 971.252539][T25668] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 971.275860][T25664] FAT-fs (loop2): Filesystem has been set read-only [ 971.278183][T25668] FAT-fs (loop3): Filesystem has been set read-only 12:37:34 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:34 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x4b00000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:34 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x5603000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:34 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x4000000002, 0x10) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xc0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x34b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b0000dc02410000000100130e0006001500cd5edc2976d153b4", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 12:37:35 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 971.569705][T25693] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 971.597871][T25693] FAT-fs (loop2): Filesystem has been set read-only [ 971.604806][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 971.604860][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:35 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 971.614152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 971.622293][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 971.650009][T25699] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 971.682286][T25699] FAT-fs (loop3): Filesystem has been set read-only 12:37:35 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfff, 0x7, 0x9}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000000c0)=r1, 0x4) 12:37:35 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x4e05000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:35 executing program 0: perf_event_open$cgroup(0x0, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2b70696473204affa4cefd0e1d07322bf2a4c6497817a66079de0ee9c351b70e09a3f7f755c192d218559f50857df2886a9e28b0ff19c05f17e0778fd8fcc1fb2782bc3fe7144f6f592ab715d6c4098d8c184b8c6d157e63df90bb0f3f5d051f4c6d7506a62af9071a2754"], 0x6) 12:37:35 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:35 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x5613000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:35 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000440)='cpu&5\n\n\n\x00)\x00\x05\x00\x03\x9c\xd3\x0e5\xcc\xa0\x1d=\v\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7&\xb5yt\x82\xfb\x1d\x83\xe6\xf8.-m\n\xf3\xb1(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,K\\\xf4\x1a\xc5]Y;\t\x06\xbe*\xaa&\xbd\x16xQ\x86\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dr5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\x90@\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x8d\xfd\xe4\xbbs\xbf\n\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xbe\x1f\xe5\x86\xb1x\x00\x00\x00\x00\x00\x00\x00\x00\x93\xab\x05') [ 972.084175][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 972.090186][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 972.109547][T25732] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 972.137443][T25732] FAT-fs (loop3): Filesystem has been set read-only [ 972.164410][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 972.170599][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:35 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x682080, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}]}) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0xcc000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000380)=0xfffffffffffffeec) 12:37:35 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:35 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 972.189328][ T26] audit: type=1804 audit(1571315855.691:587): pid=25739 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1096/file0/file0" dev="sda1" ino=17138 res=1 12:37:35 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x5608000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:35 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x5802000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:35 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:35 executing program 0: 12:37:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$ax25_int(r1, 0x101, 0xf0fc17a1e321f99, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x100000001, 0x41) ioctl$RTC_PIE_OFF(r3, 0x7006) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000002c0)=""/227) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r11 = fcntl$dupfd(r8, 0x406, r10) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r12, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getsockopt$inet_buf(r12, 0x0, 0x10, &(0x7f00000003c0)=""/131, &(0x7f0000000140)=0x83) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r13 = openat$cgroup_ro(r11, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r13, 0x2401, 0xfffffffffffffffe) r14 = syz_open_dev$dspn(&(0x7f0000000600)='/\x01\x00\xff\xffdsp#\x00', 0x3, 0x101000) sendto$llc(r14, &(0x7f0000000640)="bb5cddcf8f496885acd935a05665f2ec2e59aae709c1825f77f05da558fdc0385081e7dea915dbd0c6e40c46edf5d15db6f000c0fbf79de4e26762baf8cbe4e8e89e358d86f706179a16109f47210f43d0f64f7f5978be4cb8c3243fc1c0d84a86fca3dc", 0x64, 0x80000, &(0x7f00000006c0)={0x1a, 0x10e, 0x0, 0x7, 0x1, 0x0, @random="031d27030494"}, 0x10) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$KVM_PPC_GET_PVINFO(r16, 0x4080aea1, &(0x7f0000000480)=""/234) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2}}, 0x20) 12:37:36 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 972.522251][T25762] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:36 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='\x00-\xec\xf3\xd0\xe0o\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x3800, 0x0, {0x2, 0x4}, 0x800, 0x7}}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = gettid() r4 = gettid() sendmmsg$unix(r2, &(0x7f0000003f40)=[{&(0x7f0000000040)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001bc0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x70}], 0xfd, 0x0) r5 = clone3(&(0x7f00000012c0)={0x2000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), 0x30, 0x0, &(0x7f0000000100)=""/158, 0x9e, &(0x7f00000002c0)=""/4096}, 0x40) r6 = geteuid() syz_mount_image$ext4(&(0x7f0000001380)='ext2\x00', &(0x7f00000013c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x9, 0x8, &(0x7f0000001980)=[{&(0x7f0000001400)="3f22462bd71a39ea6be4debe8a", 0xd, 0x2}, {&(0x7f0000001440)="21858744e3150bca2d17d4a25991e8492e664354501be16da51a7fe01e5e436b0b6fa248d064c1a0ba5ed565c523a91b5962a08d9c1445fa38c261109a2a933e5faa3c2777f1c5249a87d9a91a007a8c774c2b9c3bc2c099d419993df2b7f32edf3aa04a23ff144c792e8799d9e0203fe63b676295224b7dadef3f9a8af3b35500457748cb0b8e7c89d99dcc6ec5085ce3665abcbc8f", 0x96, 0x3ff}, {&(0x7f0000001500)="b53aa424d2167dd0772affcc9b012600c030347f501b72ce0627cbdd04ed15213b165f00e175e64101e9c333199be6c23b026eab225e5afedd00c44a73031f9d9aa19470e98ccac03b418f5e010556a7e0d8ecbae327e8c65427abc8e02d28a90f05c55036ecf07681799ee1d93cecb1f005e672a14af7f6d6bdf6f62d387e10ea5104c3f73b303cdede7b715c9b515e2a9de3caa012f16419eebe9b18d2a77e1d", 0xa1}, {&(0x7f00000015c0)="593eda22ea2dfe8cc362aaea51fbe58ed0d6b6930b1e7669879d96c309e86d6c31f97a01f560b5897ca349e11179b35a6cb9a689721b66ccf74caa5ef699db766d62d0aca42aa80ac36454037969902915c41d281fc73f12c5b4d008debca78c7f71902b67945cce8667f8b581d7ec4dbac1851283d830b1a6d4", 0x7a, 0xc6}, {&(0x7f0000001640)="a974ea2048a19a0f5bb3b2ea8337a5954725da9e82e7db9e9434f99a9b142cce50ba73edb2fdbb474347ae265d401c32ac9c3a46f4dcdb6a84362d5ed38381b5c11f1d1d1e87a5280065a9c7e5435681c60a3e60ed5896fc257ec752af2433b51271e99caaaaf83a7ff63fd58305b239d26fd93f6c87de6f3862119a58c7dfbbccdb3a19d255386f583ea1992405ccb850d7bc9694ad48e9eecd6606b0bbe8ab58ed9c06bf97eee0eb1325cadb124b795a2053a42095eb4592b2753b5415cb8f0c4e95c482", 0xc5, 0x1}, {&(0x7f0000001740)="d5af30c3e146cebee7696ea17b7a6b2fb5c39c9dc6421f42cc8911e06d44a17d4061980bce1d1f888aadc10743d980ec39c6e9481eeb63f97097e13bb545a3aa66c8890d6034689e7649e7125826bf40660d104361b5eae2fb664e355a51c340a4ecf44d4c0ed514a2eca2e01a5ac57e9e8840e9ceaec23a0625105bbba0a8fb65fb4f5ebaaf353e5834e6a509754cebc9ce068a9b62f0009cf0c7421e84d8c630afe87e29169186374c3e69230bc10011c595113bd8c6811f45749852604ad8ee7f72a89bf904e428d71a88a5452f181b9da3ad918cc46d869994ba8b39", 0xde, 0xffffffffffff7fff}, {&(0x7f0000001840)="f0109cb1d7274361a9b98dbdd5f671b2cebe78b6e5a4a4da5543d366a7def513e2b7942da9f3618538138a52ad0e445b81491358f27660f9ff8b7a30a9e5b989c9691fd4ea56b10dae3adb99002fd2a8042ef7a318bc8ddb58f36d72bb395130f1bc4240324f201a18c89935b18bdc7262da9dea8bc2b6e8552b2a396229f4fda8af37571417f950bf157d1fb5e16aa49b0ae55761f24713395f0d526da6de73e0db78c0dc1b88c39533c0f8", 0xac, 0x2}, {&(0x7f0000001900)="4258bb60cf226f644daf760073e8778e5b76171e74db5c7e38389c034383f29482b1d1321f402ef841ad751ebb5dfbb0f8ce7fbf1e5c703534c8b917236bcdff1aee4f0d", 0x44, 0x6}], 0x1c, &(0x7f0000001a40)={[{@prjquota='prjquota'}, {@prjquota='prjquota'}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x33ee}}], [{@smackfshat={'smackfshat', 0x3d, 'vmnet1'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00-\xec\xf3\xd0\xe0o\x00'}}, {@permit_directio='permit_directio'}, {@hash='hash'}, {@seclabel='seclabel'}, {@euid_lt={'euid<', r6}}, {@appraise='appraise'}, {@subj_user={'subj_user', 0x3d, '\x00-\xec\xf3\xd0\xe0o\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x36, 0x35, 0x64, 0x31, 0x37, 0x66, 0x61], 0x2d, [0x30, 0x65, 0x33, 0x31], 0x2d, [0x2d, 0x33, 0x38, 0x62], 0x2d, [0x62, 0x36, 0x62, 0x51], 0x2d, [0x64, 0x32, 0x32, 0x9c, 0x3e, 0x36, 0x62, 0x63]}}}]}) rt_tgsigqueueinfo(r3, r5, 0x40, &(0x7f0000001300)={0x1e, 0x1, 0xfb}) 12:37:36 executing program 0: [ 972.574743][T25762] FAT-fs (loop2): Filesystem has been set read-only 12:37:36 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x5e0a000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:36 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x5e0b000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:36 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:36 executing program 0: 12:37:36 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000300)=""/134, 0x80}, &(0x7f0000000000), 0x5d}, 0xfffffd5a) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x9bc7d2f2c2bbc46, 0x2, {0x200}}, 0x18) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x40400, 0x100) dup(r0) 12:37:36 executing program 0: 12:37:36 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:36 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r4, 0x5}, &(0x7f00000000c0)=0x135) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) [ 973.024670][T25794] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 973.032531][T25794] FAT-fs (loop3): Filesystem has been set read-only 12:37:36 executing program 0: [ 973.131537][ T26] audit: type=1804 audit(1571315856.651:588): pid=25808 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1098/file0/file0" dev="sda1" ino=17654 res=1 12:37:36 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:36 executing program 0: 12:37:36 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x5e1a000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:36 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x6000000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:36 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:36 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) fcntl$setsig(r1, 0xa, 0x8) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400201) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000100)=0x8, 0x4) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:36 executing program 0: 12:37:37 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:37 executing program 0: 12:37:37 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24, @local}, {}, 0x4, {0x2, 0x4e24, @broadcast}, 'bridge0\x00'}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:37 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6009000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 973.686246][ T26] audit: type=1804 audit(1571315857.211:589): pid=25860 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1099/file0/file0" dev="sda1" ino=17202 res=1 12:37:37 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x660e000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:37 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:37 executing program 0: 12:37:37 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x49}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000080)=""/206) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0x1f, 0x3}}) [ 973.971855][T25877] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:37 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 974.029067][T25877] FAT-fs (loop2): Filesystem has been set read-only 12:37:37 executing program 0: [ 974.121247][ T26] audit: type=1804 audit(1571315857.641:590): pid=25871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1502/file0/file0" dev="sda1" ino=17664 res=1 12:37:37 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:37 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x6903000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:37 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6700000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:37 executing program 0: 12:37:37 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:37 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xa3e102530aebd536, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) 12:37:37 executing program 0: [ 974.441721][ T26] audit: type=1804 audit(1571315857.961:591): pid=25911 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1101/file0/file0" dev="sda1" ino=17394 res=1 12:37:38 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) 12:37:38 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 974.626047][ T26] audit: type=1804 audit(1571315858.151:592): pid=25923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1503/file0/file0" dev="sda1" ino=17058 res=1 12:37:38 executing program 0: 12:37:38 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x6e01000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:38 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6800000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:38 executing program 1: shutdown(0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x10000, 0x2e8301) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000000c0)={0x9, @raw_data="b1e8a909aa0b9634cd0a6c996b5c23db41899ebc16730fc34c39029c98d2d29377241c60f8a55eececac567618eec3d6e4cb73976d183b6ce5bc946747c88b79e7cb440a1a3caff1b01b95a6a0945ed1befe678aa744d3641357f6374ead760c26d2e8df7e351ae848dda91103d7bde49c2fd6ff3de65b0dd78d3f11f2f2272616d02c0aca3b54182469c45a3fb4e368ff65bda171106f823ce807163b20ec8c78a2e0826fba56d79e4a4ee45835bdc910ca47993a8c0dea6f145f08dbe909a8bd993a423f84ac28"}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x1d9b, 0x7}) 12:37:38 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:38 executing program 0: 12:37:38 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:38 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x0, @output={0x0, 0x0, {0xfffffffe, 0x3}}}) 12:37:38 executing program 0: [ 975.022894][ T26] audit: type=1804 audit(1571315858.541:593): pid=25952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1102/file0/file0" dev="sda1" ino=17670 res=1 12:37:38 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x7106000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:38 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x6810000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:38 executing program 0: 12:37:38 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 975.161055][ T26] audit: type=1804 audit(1571315858.581:594): pid=25956 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1504/file0/file0" dev="sda1" ino=17202 res=1 12:37:38 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x8, 0x6, 0x0, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_getsetattr(r2, &(0x7f0000000080)={0x1, 0x9e, 0x7, 0x4, 0xffffffffffffff00, 0x5, 0x10001, 0x5}, &(0x7f00000000c0)) 12:37:38 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) socket$tipc(0x1e, 0x5, 0x0) 12:37:38 executing program 0: 12:37:38 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 975.498360][ T26] audit: type=1804 audit(1571315859.021:595): pid=25985 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1505/file0/file0" dev="sda1" ino=16642 res=1 12:37:39 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x7007000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:39 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 975.586568][ T26] audit: type=1804 audit(1571315859.111:596): pid=26000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1103/file0/file0" dev="sda1" ino=17394 res=1 12:37:39 executing program 0: 12:37:39 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x7909000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:39 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:39 executing program 0: 12:37:39 executing program 0: 12:37:39 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:39 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x3, 0xf0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000002c0)={'nat\x00'}, &(0x7f0000000340)=0x78) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f0000000380)={0x0, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000000)={0xffff, "8a84a573dffd5c6a750711a63d7206ac4685a09f57c23df3fe5ec51d3d092b14", 0x7}) socket$nl_crypto(0x10, 0x3, 0x15) openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/cuse\x00', 0x2, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0xffffffffffffffff, r10) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000400)='reiserfs\x00', &(0x7f00000005c0)='./file0\x00', 0x8, 0x1, &(0x7f0000000640)=[{&(0x7f0000000600)="bea33b3e63c7bd22fe7b6a11abef70c48ba61ce2d3fc33333f8793c5e35bea2b2adae8f8c0bb8333f761b90b74ef50", 0x2f, 0x80000000}], 0x100040, &(0x7f0000000740)={[{@balloc_noborder='block-allocator=noborder'}, {@noacl='noacl'}, {@balloc_hashed_reloc='block-allocator=hashed_relocation'}, {@hash_rupasov='hash=rupasov'}, {@balloc_border='block-allocator=border'}, {@replayonly='replayonly'}, {@balloc_hashed_reloc='block-allocator=hashed_relocation'}, {@hash_rupasov='hash=rupasov'}], [{@obj_type={'obj_type', 0x3d, '[ppp1'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@euid_gt={'euid>', r10}}, {@euid_lt={'euid<', r11}}]}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @capture={0x1800, 0x0, {0x80000020, 0xa5b}, 0x3, 0x400}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x34}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="9fe054beebc92c010018000000000000003f0100003f0100000a000000000000000000000204000000060000007a5600f3eeb31a605feff6177e84010100000f00000000000000060000000b000000050000000180000d0000000000000007000000020000000600000f030000000500000008000000ff00000805000000070000000200000001000000000100000400000002000000ad0b00000500000001000000040000000900000005000000fbffffff080000007b60b70700000408000006040000000c0000000a270000090000009a00000010000000ffffffff09000000fad210480100000001000080010000000400df6c4f000003000000ffffffff0e00000030adfa1e05327f000000000005000004090000000c000000040000004d1a00000d00000002000000000000000920000000000000010100000100000000000000030000b5cd37177f1aebad0040000009070000000000000a03100000000000612e30006f3000b05ad3d3d17fa36bd8f607857453451e5bb17c5e21603ad5afbf5ab4cc138106ee8c011a36132033ad7fc4a13337488fb0520d539e48a11e568644055beea7d2e449216a171abfe2ef2c2bc59b40dd9daa9468d4d3fb0f4b1539031da34e2a0a5bd93ff2636f0c6f0cfbbbc01238634215d01c73e11509ce6cfc7c25280166cf469ad5"], &(0x7f0000000080)=""/214, 0x162, 0xd6, 0x1}, 0x20) [ 975.962243][ T26] audit: type=1804 audit(1571315859.481:597): pid=26009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1506/file0/file0" dev="sda1" ino=16642 res=1 12:37:39 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x7017000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:39 executing program 0: 12:37:39 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x8000000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 976.104300][ T26] audit: type=1804 audit(1571315859.591:598): pid=26030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1104/file0/file0" dev="sda1" ino=17058 res=1 12:37:39 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:39 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0x61, 0x2) [ 976.244167][ C0] net_ratelimit: 20 callbacks suppressed [ 976.244174][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 976.249914][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:37:39 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:39 executing program 0: [ 976.324160][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 976.329995][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:39 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) prctl$PR_SET_TSC(0x1a, 0xba5591fdc941b5c9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x0, @capture={0x1000, 0x1, {0x7}, 0x628, 0x47}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0x7fff, 0x4a, 0xf7, 0xb95, 0x3, 0x8c9b, 0x8, 0xb}}) 12:37:40 executing program 0: [ 976.499604][T26034] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:40 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x810c000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_setup(0x1000, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x7, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) io_getevents(r1, 0x0, 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x77359400}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) ioctl$FICLONE(r0, 0x40049409, r0) 12:37:40 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 976.559201][T26034] FAT-fs (loop3): Filesystem has been set read-only 12:37:40 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x7206000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 976.644456][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 976.650279][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:40 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:40 executing program 0: [ 976.801399][T26073] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:40 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x8, @output={0x0, 0x0, {0x0, 0x1}}}) [ 976.854697][T26073] FAT-fs (loop2): Filesystem has been set read-only 12:37:40 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:40 executing program 0: 12:37:40 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x8401000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 976.976461][ T26] audit: type=1804 audit(1571315860.501:599): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1508/file0/file0" dev="sda1" ino=17058 res=1 12:37:40 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x780e000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:40 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 977.218666][T26102] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:40 executing program 0: [ 977.261269][T26102] FAT-fs (loop2): Filesystem has been set read-only 12:37:40 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 977.351177][T26109] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 977.364170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 977.369966][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:40 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x890f000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:40 executing program 0: [ 977.399314][T26109] FAT-fs (loop3): Filesystem has been set read-only 12:37:41 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:41 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x781e000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 977.550248][T26125] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:41 executing program 0: [ 977.594394][T26125] FAT-fs (loop2): Filesystem has been set read-only 12:37:41 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x8c04000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:41 executing program 0: 12:37:41 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 977.844184][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 977.844214][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:37:41 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:41 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x7a0d000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:41 executing program 0: 12:37:41 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x9407000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:41 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:41 executing program 0: 12:37:41 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 978.275469][T26169] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:41 executing program 0: [ 978.320764][T26169] FAT-fs (loop3): Filesystem has been set read-only 12:37:41 executing program 0: 12:37:41 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000c00)={r2, 0x3}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)={r2, 0x1}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000380)={r2, 0x1}) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000b80)={0x2, &(0x7f0000000b40)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000c00)={r4, 0x3}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)={r4, 0x1}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000380)={r4, 0x1}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000000)={r4, &(0x7f00000006c0)=""/223}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:42 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x8000000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:42 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x9825610e00000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:42 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:42 executing program 0: 12:37:42 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x1, @output={0x0, 0x0, {0x3}, 0x6}}) 12:37:42 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:42 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x4000) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000100)) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output={0x0, 0x0, {0x33}, 0x76d}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0x7, 0x7}, {0x38}, 0x7, 0x4, 0x5}) 12:37:42 executing program 0: 12:37:42 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:42 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x8051010000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:42 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x9852920f00000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:42 executing program 0: 12:37:42 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400883, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuacct.stat\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8e650328bc8de119}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x4, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000884}, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000300)={0x5, 0x2, 0x20, 'queue0\x00', 0x7fffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r4, 0x4c00, 0xffffffffffffffff) pipe(&(0x7f0000000140)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x40000, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video36\x00', 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5386, &(0x7f0000000540)) ioctl$VIDIOC_G_JPEGCOMP(r5, 0x808c563d, &(0x7f0000000080)) syz_open_dev$sndtimer(&(0x7f0000000580)='/dev/snd/timer\x00', 0x0, 0x300100) 12:37:42 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:42 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000005040), 0x15f, 0x0) [ 979.276242][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 979.276252][ T26] audit: type=1804 audit(1571315862.801:605): pid=26240 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1513/file0/file0" dev="sda1" ino=17694 res=1 12:37:42 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:42 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @raw_data="e6a3e9f768765de3e96bf5a2a312bcb94265f5e567227c9f2e877c1bf52898c663027a57b13f06af15c3be88f241a077900921394177ed1bca8c98a40466c4059aafed0bd0ed37c70256fe71aa9d39aa0376ac041c0e19cbbd3bfe08838dad44f5986b825da6cab01ef5118cbe3e9cf84b68f7d4670b561c55588d7411f9697d3efc8e3be9267dc90e75165fc8e9682de1bf199df2d2ab9c6edcb59edb06aa84fe7157b0174c622998f4c64cc8543a0360f3ba320785f74a262d317e19b2e2dd5a958fabfb884249"}) 12:37:42 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x8204000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:42 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x98f82f0d00000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 979.442508][ T26] audit: type=1804 audit(1571315862.911:606): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1112/file0/file0" dev="sda1" ino=16755 res=1 12:37:43 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x100000080}, 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xfa, 0x1c0005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000001c0)={{0x0, 0x1}, {0x80}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fe, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x68, 0x4, 0xa5, 0x7, 0x7, 0x2, 0x3e, 0x0, 0x1d5, 0x40, 0x20, 0x0, 0xbf, 0x38, 0x2, 0x3, 0x7ff}, [{0xc8e9caa4, 0x0, 0x3, 0x5, 0x4, 0xfffffffffffff801}], "910234fc085dec3de3a026f90fe3", [[], [], [], []]}, 0x486) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, &(0x7f0000000000), 0x0}, &(0x7f0000000180)=0x78) 12:37:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSETMODE(r4, 0x4b3a, 0xffff) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x1b, "65ad090c933cd1d5651fcaf326de7f0263a0fec7e646535821d984"}, &(0x7f0000000080)=0x23) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e23, 0x80, @empty, 0x1f}}, 0x6, 0x7, 0x2, 0x401, 0x1}, &(0x7f0000000180)=0x98) r6 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:43 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 979.830061][ T26] audit: type=1804 audit(1571315863.351:607): pid=26276 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1514/file0/file0" dev="sda1" ino=17058 res=1 12:37:43 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x12000000000) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:43 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}], 0x3c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r2, r1, 0x80000) tkill(r0, 0x1000000000013) 12:37:43 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x8214000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:43 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 979.880377][ T26] audit: type=1804 audit(1571315863.401:608): pid=26295 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1113/file0/file0" dev="sda1" ino=17690 res=1 12:37:43 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0x9c0a000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:43 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x0, 0x0) futimesat(r1, 0x0, 0x0) [ 980.208103][ T26] audit: type=1804 audit(1571315863.731:609): pid=26303 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir120392581/syzkaller.cPgdbu/1515/file0/file0" dev="sda1" ino=17686 res=1 12:37:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpeername$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0xffffff32) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r1, 0x7004) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:43 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:43 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xa40d000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:43 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x8403000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 980.317172][ T26] audit: type=1804 audit(1571315863.831:610): pid=26319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1114/file0/file0" dev="sda1" ino=16755 res=1 12:37:43 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$netrom(r0, &(0x7f0000000100)={{0x3, @null}, [@null, @netrom, @bcast, @remote, @bcast, @netrom, @rose, @rose]}, &(0x7f0000000000)=0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000200)={0xa0, 0x0, 0x8, {{0x0, 0x3, 0x0, 0x2, 0x0, 0xffffffffffffff2b, {0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x1, 0x0, r5, 0x0, 0x81}}, {0x0, 0x1}}}, 0xa0) fchownat(r3, &(0x7f0000000080)='./file0\x00', 0xee01, r5, 0x800) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0xfffffffffffffffe) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x3, @output}) 12:37:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 12:37:44 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:44 executing program 1: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000002c0)={0x3, @output={0x0, 0x1, {0x8}, 0x4}}) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x0, 0x0, 0x3, 0x1, 0x0, 0x6}, 0x21) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x100, 0x4) 12:37:44 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 980.703071][T26341] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) 12:37:44 executing program 0: prlimit64(0x0, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000002c0)={0x7, 0x4, 0x0, 0xfffeffff, 0x19, 0x20, 0x2, 0x3f, 0x9, 0x21, 0x5, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ftruncate(r1, 0x200003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00') r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00') accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x2) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 12:37:44 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x8a0b000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 980.745597][T26341] FAT-fs (loop2): Filesystem has been set read-only 12:37:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xee2a451898e8d6db}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_SG_ALLOC(r4, 0xc0106438, &(0x7f0000000080)={0x5c3, r7}) 12:37:44 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xa702000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000002340)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000680)={'syz1\x00', {}, 0x0, [], [], [0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000c00)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7]}, 0x45c) 12:37:44 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 980.943312][T26366] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) 12:37:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[]}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'veth1_to_bond\x00', {0x2, 0x4e24, @multicast2}}) [ 980.986108][T26382] input: syz1 as /devices/virtual/input/input5 [ 981.007115][T26366] FAT-fs (loop3): Filesystem has been set read-only 12:37:44 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) [ 981.109135][T26389] input: syz1 as /devices/virtual/input/input6 12:37:44 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x8a1b000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) [ 981.192228][ T26] audit: type=1804 audit(1571315864.711:611): pid=26393 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir519089452/syzkaller.MkqC9b/1116/file0/file0" dev="sda1" ino=17841 res=1 12:37:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000340)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f00000000c0)=0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x8, 0xa8, 0xa9, 0x61, 0x0, 0x400, 0x4, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x7, @perf_config_ext={0x9, 0x6c3}, 0x20484, 0x4, 0x0, 0x6, 0x4, 0x2, 0x6}, r3, 0xc, 0xffffffffffffffff, 0x4) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000340)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r4, 0xc0044308, &(0x7f00000000c0)=0x80) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f0000000080)=0x5f5bd099) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000000)=0x1) 12:37:44 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000596000)=0x9, 0x4) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e22, @local}, 0x10) [ 981.341483][T26404] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000500) [ 981.364542][T26404] FAT-fs (loop3): Filesystem has been set read-only 12:37:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x1000000ce) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000005c0)=""/4096, 0x1000) 12:37:45 executing program 2: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x81) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b"], 0x61) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f00000001c0)=0xac00000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:45 executing program 3: sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) open(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="56ef63761548000000000000100000f90c2d005564dca311833f47c703ab1c31ad5c4b03c8583390eeaa6048ca7af051ab58014e978b36f0ff9e150ea83116e0dc348bbaf1ae1c2592428d12770bb80ceda0b54899cc1e79436a4bc0043f0fcc0b04d1b78d9c28cb6ab9f90d9a8c407cb1553e7082af02252365281820535f792ccdc1b8e7192a5effff271b8a0f97c694aa5d424848"], 0x96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendfile(r1, r1, &(0x7f00000001c0)=0x8c0a000000000000, 0x8080fffffffe) creat(&(0x7f0000000280)='./file0\x00', 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 12:37:45 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000340)=""/7, 0x7}], 0x43, 0x0) 12:37:45 executing program 1: memfd_create(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1100000042000501f80000366ab1001000ed623c087d41ee190705623fff526676c7517f97b2d2add33be3693e6acc651514fd9a9c7c4b9d5f8e1656e057a8cbb9cd3712f03929ed5379672fd3930e550ac195d46fc2af830c9c2724174c474c486369942660f24a01db522f312fcd01fb1406948e6726091927d526e390790601318ff2157656319d9c20c885828e90dec4cdbf0b6ee89e22af6edd19a0de01de22859215d8c0a5937736a9553018ad970990e40eb1b1d86c05143f8b9415f4b3d3fbee5ca991a04cdadf254be7a8554ca449e9ed4dc937ab826e72ed0abc9a19df0000000000a1643319e2887ef99398"], 0x14}}, 0x0) 12:37:45 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000002780)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x6, @loopback, 0xfffff5de}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f00000000c0)="3a87af6af9723c35a454039efd615ade80672cc52c4e37ca70ea68bda3bad0d234162831e56734d59d8a282c2d7184b8184f18401ef3913219619897ebe104bf078d17ce6b33ae6b7bbd7fa5e15c0d4b9aeec73ca56c3bdc661dab1ddea492ca0cb8ff150d72e366b905865bae7eff7b942ab4baea0c0d982c12e930681f369502ede5ac93367024a5f2a97643b6a88297f236e9902e", 0x96}, {&(0x7f0000001300)="cf8c7fddea7b12ed9e6d3947507d6653bcee8f7970f37ee99f32e879aa51603e53a0a659e31dd60b16786e0e65237e967199648ee4d0c215efa54dfc2ac57ada83d5765160239d871dac4ed53fad29760febe23a1d15943c7cf3d9883c78bb", 0x5f}, {&(0x7f0000001380)="4aa874980711e268fcd7bb530e18b49c4a1d55f89a9c463ce88e07ec0f318d1477ba51cb8ee82596c7c96687b5e23d22f59fe5a6230878f406b4cdd348fe84121d7e1cef859a9930d9070e319d8f9a60bd570b9803186224a914aa1728c47c91311b512aa9664f", 0x67}, {&(0x7f0000001400)="6a4117659053c574467201a1a121dab9e9114a4d7b110276eb22c9eac3fc94db49442e80f6d4c5b7b5bf5e075238da6962ac605d9b16032cfe5d07348336ea186831d5dafba6d9bf378cb4fc630bb2179d224e588bc9f9", 0x57}, {&(0x7f0000001480)="79071f926ebbdb6969d2ef4b68f1252455f0fd45d79c338839625e35e99daa772f6fa13e7a6f83e5a0d3744c8a9107f467579ea6ac531a5bf0508dec3f94ee858c989a230ce18f89", 0x48}, {&(0x7f0000001500)="ea6271bf2c8faed711316562bb39d88d3b262988421b0da4e3ee77fd397f2f7d9f30396d487d511a382b30de5e837cde48fbdaf1253fae4df3aa935688015d31fa516556d15e87face97dc62f6b8a0051881d211a2d38bc7cd1e1c50e0bb7dc71a8f927530ab109314cccc8e34b101ce4df67f4419a717c9d30742eebeaed475a73f73faa33a1902031a886d7c5d90188dbfa7bb74c7eb1f20a40e17cd281edc41f760394af876fcbfdb56534498f285", 0xb0}, {&(0x7f00000015c0)="5102996dfc781825fb04dc53dee777774632dca4bcda7c7bc873957cbc20b38828bb2742d5aad80e0c582e2b0bd4789f452d0e22a58bcfa83caa456f5ff329740d19e206c5d7eefcd081afac3f1d66af886d6f2ccb839db633efc7f47b3444458e9537a627451f9788e151ab72f1ca0bfa4a580ab2f1e0193c77130304f3", 0x7e}, {&(0x7f0000001640)="0ad09bfd690e6bdd08d59368c18318f08562bca2267be60c1109e6c47ca2c6fe5de341eff6a65330710f6d3d4f36d6caab3f19c8af5c25095f1149913fd4e05d0319d0a75bde33534416ee23c3eddc256821200cd087d51536bc33e6", 0x5c}, {&(0x7f00000016c0)="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", 0x1000}], 0xa, 0x0, 0x0, 0x3954f2518b0851d4}, 0x1010) socket$nl_generic(0x10, 0x3, 0x10) getpeername$netrom(r0, &(0x7f0000002880)={{0x3, @rose}, [@netrom, @bcast, @netrom, @remote, @bcast, @bcast, @rose, @default]}, &(0x7f0000002900)=0x48) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000002940)={0x0, 0x0, {0x5, 0x9, 0xf, 0x2, 0x2, 0x3, 0x2, 0x1}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0xa, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x98) r2 = accept(r1, &(0x7f00000027c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000002840)=0x80) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0xffffff7f0e000000}, 0x0) [ 981.524168][ C1] net_ratelimit: 23 callbacks suppressed [ 981.524176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 981.535687][ C1] protocol 88fb is buggy, dev hsr_slave_1 12:37:45 executing program 4: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3456}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d6000/0x1000)=nil) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00[\xaaZ\xaf\xc0\x8c\xaa\xaf\xc1DP\xf0_\'\xaf\xeb\x19s\xf3\xafp\xcam\x14\x9cR\x8d\xefh\xbb\xca\xfc\xdeF4\xbbc\x93\xae\xbf\xe6\x7fJL]\xb7\xc0#;,F\xc2\xc8\x93<\x0f7\xe4\x01\xc0\xa6#\x82\x02\xcdT\x02l\x80\xff\xf8\xd8YQL\x06\xdexu!\xb32$\x04&e\\^\xe0nZ') preadv(r3, 0x0, 0x0, 0x0) 12:37:45 executing program 1: readv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000000)=""/187, 0xbb}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0) [ 981.705350][T26424] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000500) [ 981.719750][T26444] ------------[ cut here ]------------ [ 981.725495][T26444] WARNING: CPU: 1 PID: 26444 at fs/readdir.c:110 filldir64+0x4f4/0x5f0 [ 981.733735][T26444] Kernel panic - not syncing: panic_on_warn set ... [ 981.740334][T26444] CPU: 1 PID: 26444 Comm: syz-executor.0 Not tainted 5.4.0-rc3+ #0 [ 981.741233][T26424] FAT-fs (loop2): Filesystem has been set read-only [ 981.748216][T26444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.748234][T26444] Call Trace: [ 981.748254][T26444] dump_stack+0x1d8/0x2f8 [ 981.748353][T26444] panic+0x264/0x7a9 [ 981.748366][T26444] ? __warn+0x105/0x210 [ 981.759809][ T3900] kobject: 'loop2' (000000007499ddbc): kobject_uevent_env [ 981.765008][T26444] ? filldir64+0x4f4/0x5f0 [ 981.765021][T26444] __warn+0x20e/0x210 [ 981.765029][T26444] ? filldir64+0x4f4/0x5f0 [ 981.765044][T26444] report_bug+0x1b6/0x2f0 [ 981.765056][T26444] ? filldir64+0x4f4/0x5f0 [ 981.783124][ T3900] kobject: 'loop2' (000000007499ddbc): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 981.787977][T26444] do_error_trap+0xd7/0x440 [ 981.787993][T26444] do_invalid_op+0x36/0x40 [ 981.828631][T26444] ? filldir64+0x4f4/0x5f0 [ 981.833135][T26444] invalid_op+0x23/0x30 [ 981.837304][T26444] RIP: 0010:filldir64+0x4f4/0x5f0 [ 981.842331][T26444] Code: 1e 48 8b 45 90 42 8a 04 20 84 c0 0f 85 cf 00 00 00 48 8b 45 c0 44 29 38 31 c0 eb 81 e8 15 25 b9 ff 0f 0b eb 07 e8 0c 25 b9 ff <0f> 0b 49 83 c6 24 4c 89 f0 48 c1 e8 03 42 8a 04 20 84 c0 0f 85 bd [ 981.854810][ T3900] kobject: 'loop4' (0000000056789289): kobject_uevent_env [ 981.861948][T26444] RSP: 0018:ffff8880a0cbfb90 EFLAGS: 00010283 [ 981.861957][T26444] RAX: ffffffff81ba1384 RBX: ffff8880a0cbfd30 RCX: 0000000000040000 [ 981.861962][T26444] RDX: ffffc90005f4d000 RSI: 0000000000001861 RDI: 0000000000001862 [ 981.861967][T26444] RBP: ffff8880a0cbfc10 R08: ffffffff81ba0ec4 R09: 0000000000000004 [ 981.861972][T26444] R10: fffffbfff1120b15 R11: 0000000000000000 R12: dffffc0000000000 [ 981.861977][T26444] R13: 0000000000000004 R14: ffff8880a0cbfe88 R15: 000000000000000c [ 981.862004][T26444] ? filldir64+0x34/0x5f0 [ 981.881539][ T3900] kobject: 'loop4' (0000000056789289): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 981.883137][T26444] ? filldir64+0x4f4/0x5f0 [ 981.883161][T26444] ? _raw_spin_unlock+0x2c/0x50 [ 981.883171][T26444] ? iunique+0x1d9/0x200 [ 981.883187][T26444] ? ksys_getdents64+0x3f0/0x3f0 [ 981.947998][T26444] __fat_readdir+0x1320/0x1a50 [ 981.952781][T26444] ? retint_kernel+0x2b/0x2b [ 981.957398][T26444] ? __kasan_check_write+0x14/0x20 [ 981.962518][T26444] ? down_read_killable+0x11e/0x410 [ 981.966391][ T3900] kobject: 'loop1' (000000001feb3ac2): kobject_uevent_env [ 981.967714][T26444] fat_readdir+0x46/0x50 [ 981.979044][T26444] iterate_dir+0x2a4/0x520 [ 981.980545][ T3900] kobject: 'loop1' (000000001feb3ac2): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 981.983467][T26444] ksys_getdents64+0x1ea/0x3f0 [ 981.983479][T26444] ? ksys_getdents64+0x3f0/0x3f0 [ 981.983492][T26444] __x64_sys_getdents64+0x7a/0x90 [ 982.008674][T26444] do_syscall_64+0xf7/0x1c0 [ 982.013202][T26444] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.019198][T26444] RIP: 0033:0x459a59 [ 982.023093][T26444] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.042700][T26444] RSP: 002b:00007fa0d5912c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 982.051120][T26444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a59 [ 982.059363][T26444] RDX: 0000000000001000 RSI: 00000000200005c0 RDI: 0000000000000006 [ 982.067342][T26444] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 982.075321][T26444] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0d59136d4 [ 982.083163][ T3900] kobject: 'loop4' (0000000056789289): kobject_uevent_env [ 982.083301][T26444] R13: 00000000004c0535 R14: 00000000004d2d38 R15: 00000000ffffffff [ 982.096207][ T3900] kobject: 'loop4' (0000000056789289): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 982.109889][T26444] Kernel Offset: disabled [ 982.114258][T26444] Rebooting in 86400 seconds..