, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:46 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, r0, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x200}}, 0x0) 05:04:46 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x6, 0xe4, 0x1, 0x9, 0x0, 0xffffffffffff373f, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1400, 0x3, 0x1, 0x8, 0x7, 0x3ff, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) r1 = signalfd4(r0, &(0x7f0000000140)={[0x9]}, 0x8, 0x80800) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000040)}, 0x2}, 0x0, 0x0, r0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x40107447, 0x20000000) 05:04:46 executing program 3 (fault-call:5 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:46 executing program 5: getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB]) 05:04:46 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) recvfrom(r1, &(0x7f00000000c0)=""/243, 0xf3, 0x2000, &(0x7f0000000000)=@ipx={0x4, 0x18, 0xff, "a3c929bff258", 0x40}, 0x80) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x3) [ 1977.130145] FAULT_INJECTION: forcing a failure. [ 1977.130145] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.156101] CPU: 1 PID: 31734 Comm: syz-executor.3 Not tainted 4.14.213-syzkaller #0 [ 1977.164008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1977.173357] Call Trace: [ 1977.175957] dump_stack+0x1b2/0x283 05:04:46 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x7, 0x440c40) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 1977.179847] should_fail.cold+0x10a/0x154 [ 1977.184003] should_failslab+0xd6/0x130 [ 1977.187995] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1977.193108] __kmalloc_node_track_caller+0x38/0x70 [ 1977.198041] __alloc_skb+0x96/0x510 [ 1977.201760] netlink_sendmsg+0x901/0xb80 [ 1977.205823] ? nlmsg_notify+0x170/0x170 [ 1977.209794] ? kernel_recvmsg+0x210/0x210 [ 1977.213945] ? security_socket_sendmsg+0x83/0xb0 [ 1977.218695] ? nlmsg_notify+0x170/0x170 [ 1977.222680] sock_sendmsg+0xb5/0x100 [ 1977.226392] ___sys_sendmsg+0x6c8/0x800 [ 1977.230365] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1977.235117] ? perf_trace_lock_acquire+0x510/0x510 [ 1977.240047] ? check_preemption_disabled+0x35/0x240 [ 1977.245075] ? __fget+0x1fe/0x360 [ 1977.248534] ? lock_acquire+0x170/0x3f0 [ 1977.252492] ? lock_downgrade+0x740/0x740 [ 1977.256626] ? __fget+0x225/0x360 [ 1977.260065] ? __fdget+0x196/0x1f0 [ 1977.263587] ? sockfd_lookup_light+0xb2/0x160 [ 1977.268062] __sys_sendmsg+0xa3/0x120 [ 1977.271846] ? SyS_shutdown+0x160/0x160 [ 1977.275802] ? wait_for_completion_io+0x10/0x10 [ 1977.280458] ? SyS_read+0x210/0x210 [ 1977.284067] ? SyS_clock_settime+0x1a0/0x1a0 [ 1977.288487] SyS_sendmsg+0x27/0x40 [ 1977.292008] ? __sys_sendmsg+0x120/0x120 [ 1977.296051] do_syscall_64+0x1d5/0x640 [ 1977.299921] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1977.305088] RIP: 0033:0x45e219 [ 1977.308265] RSP: 002b:00007f6a1ccbac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1977.315951] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1977.323201] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 05:04:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, 0x0, 0x0) 05:04:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, 0x0, 0x0) [ 1977.330451] RBP: 00007f6a1ccbaca0 R08: 0000000000000000 R09: 0000000000000000 [ 1977.337699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1977.344947] R13: 00007ffe46e6d05f R14: 00007f6a1ccbb9c0 R15: 000000000119bf8c [ 1977.362923] cramfs: wrong magic 05:04:47 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x46200, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x40, 0x20200000, {0xffffffffffffffff}, {0xee00}, 0x6, 0x25d}) kcmp(0x0, r1, 0x0, r0, r0) setitimer(0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="284e5ea039bc26558ef4692a21f4d85020"]) 05:04:47 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9, 0x8], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) lseek(r0, 0x0, 0x3) 05:04:47 executing program 3 (fault-call:5 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1977.446721] cramfs: wrong magic [ 1977.483497] FAULT_INJECTION: forcing a failure. [ 1977.483497] name failslab, interval 1, probability 0, space 0, times 0 [ 1977.526531] audit: type=1804 audit(1609823087.158:8806): pid=31780 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1696/bus" dev="sda1" ino=15765 res=1 [ 1977.553687] CPU: 0 PID: 31775 Comm: syz-executor.3 Not tainted 4.14.213-syzkaller #0 [ 1977.561582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1977.570975] Call Trace: [ 1977.573562] dump_stack+0x1b2/0x283 [ 1977.577194] should_fail.cold+0x10a/0x154 [ 1977.581341] ? perf_trace_lock_acquire+0x510/0x510 [ 1977.586272] should_failslab+0xd6/0x130 [ 1977.590248] kmem_cache_alloc+0x40/0x3c0 [ 1977.594312] skb_clone+0x126/0x9a0 [ 1977.597854] netlink_deliver_tap+0x655/0x7d0 [ 1977.602274] netlink_unicast+0x485/0x610 [ 1977.606349] ? netlink_sendskb+0xd0/0xd0 [ 1977.610410] ? __check_object_size+0x179/0x22c [ 1977.615007] netlink_sendmsg+0x62e/0xb80 [ 1977.619082] ? nlmsg_notify+0x170/0x170 [ 1977.623049] ? kernel_recvmsg+0x210/0x210 [ 1977.627195] ? security_socket_sendmsg+0x83/0xb0 [ 1977.631949] ? nlmsg_notify+0x170/0x170 [ 1977.635916] sock_sendmsg+0xb5/0x100 [ 1977.639620] ___sys_sendmsg+0x6c8/0x800 [ 1977.643588] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1977.648339] ? perf_trace_lock_acquire+0x510/0x510 [ 1977.653277] ? check_preemption_disabled+0x35/0x240 [ 1977.658293] ? __fget+0x1fe/0x360 [ 1977.661743] ? lock_acquire+0x170/0x3f0 [ 1977.665710] ? lock_downgrade+0x740/0x740 [ 1977.669858] ? __fget+0x225/0x360 [ 1977.673310] ? __fdget+0x196/0x1f0 [ 1977.676841] ? sockfd_lookup_light+0xb2/0x160 [ 1977.681332] __sys_sendmsg+0xa3/0x120 [ 1977.685126] ? SyS_shutdown+0x160/0x160 [ 1977.689101] ? wait_for_completion_io+0x10/0x10 [ 1977.693770] ? SyS_read+0x210/0x210 [ 1977.697398] ? SyS_clock_settime+0x1a0/0x1a0 [ 1977.701806] SyS_sendmsg+0x27/0x40 [ 1977.705338] ? __sys_sendmsg+0x120/0x120 [ 1977.709391] do_syscall_64+0x1d5/0x640 [ 1977.713284] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1977.718468] RIP: 0033:0x45e219 [ 1977.721645] RSP: 002b:00007f6a1ccbac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1977.729359] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1977.736620] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1977.743881] RBP: 00007f6a1ccbaca0 R08: 0000000000000000 R09: 0000000000000000 [ 1977.751144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1977.758411] R13: 00007ffe46e6d05f R14: 00007f6a1ccbb9c0 R15: 000000000119bf8c [ 1977.778873] audit: type=1804 audit(1609823087.408:8807): pid=31757 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1696/bus" dev="sda1" ino=15765 res=1 05:04:47 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, 0x0, 0x0) 05:04:47 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x200002, 0x6) accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80800) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x218882, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x40107447, 0x20000000) socket$inet6_tcp(0xa, 0x1, 0x0) 05:04:47 executing program 5: socket$isdn(0x22, 0x3, 0x23) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x200041, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x80000001) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000080)={0xffe0, 0x1, [0x3, 0xc523, 0x6, 0x9], 0x1}) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0xfb, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0000) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0xfd04) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0xfd04) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0xfffffffffffffffd, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRESDEC=r5, @ANYBLOB=',defcontext=staff_u,\x00']) 05:04:47 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0xb0380) ftruncate(r0, 0x802) lseek(r0, 0x0, 0x3) 05:04:47 executing program 3 (fault-call:5 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1978.218417] cramfs: wrong magic [ 1978.225523] FAULT_INJECTION: forcing a failure. [ 1978.225523] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.236993] CPU: 1 PID: 31798 Comm: syz-executor.3 Not tainted 4.14.213-syzkaller #0 [ 1978.244864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.254214] Call Trace: [ 1978.256819] dump_stack+0x1b2/0x283 [ 1978.260454] should_fail.cold+0x10a/0x154 [ 1978.264620] should_failslab+0xd6/0x130 [ 1978.268600] kmem_cache_alloc+0x40/0x3c0 [ 1978.272675] skb_clone+0x126/0x9a0 [ 1978.276217] dev_queue_xmit_nit+0x2ee/0x950 [ 1978.280540] ? __skb_gso_segment+0x600/0x600 [ 1978.284946] dev_hard_start_xmit+0xaa/0x890 [ 1978.289264] ? validate_xmit_skb+0x669/0x9f0 [ 1978.293672] __dev_queue_xmit+0x1d7f/0x2480 [ 1978.298003] ? perf_trace_lock+0xf7/0x490 [ 1978.302146] ? __netlink_lookup+0x345/0x5d0 [ 1978.306463] ? netdev_pick_tx+0x2e0/0x2e0 [ 1978.310613] ? skb_clone+0x126/0x9a0 05:04:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:04:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:04:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 1978.314323] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1978.319785] ? memcpy+0x35/0x50 [ 1978.323060] ? memcpy+0x35/0x50 [ 1978.326331] ? skb_clone+0x6ac/0x9a0 [ 1978.330060] netlink_deliver_tap+0x60c/0x7d0 [ 1978.334471] netlink_unicast+0x485/0x610 [ 1978.338529] ? netlink_sendskb+0xd0/0xd0 [ 1978.342596] ? __check_object_size+0x179/0x22c [ 1978.347174] netlink_sendmsg+0x62e/0xb80 [ 1978.351237] ? nlmsg_notify+0x170/0x170 [ 1978.355210] ? kernel_recvmsg+0x210/0x210 [ 1978.359356] ? security_socket_sendmsg+0x83/0xb0 [ 1978.364110] ? nlmsg_notify+0x170/0x170 05:04:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 05:04:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 1978.368091] sock_sendmsg+0xb5/0x100 [ 1978.371807] ___sys_sendmsg+0x6c8/0x800 [ 1978.375800] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1978.380561] ? perf_trace_lock_acquire+0x510/0x510 [ 1978.385500] ? check_preemption_disabled+0x35/0x240 [ 1978.390519] ? __fget+0x1fe/0x360 [ 1978.394082] ? lock_acquire+0x170/0x3f0 [ 1978.398073] ? lock_downgrade+0x740/0x740 [ 1978.402252] ? __fget+0x225/0x360 [ 1978.405711] ? __fdget+0x196/0x1f0 [ 1978.409248] ? sockfd_lookup_light+0xb2/0x160 [ 1978.413741] __sys_sendmsg+0xa3/0x120 05:04:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 1978.417540] ? SyS_shutdown+0x160/0x160 [ 1978.421514] ? wait_for_completion_io+0x10/0x10 [ 1978.426187] ? SyS_read+0x210/0x210 [ 1978.429806] ? SyS_clock_settime+0x1a0/0x1a0 [ 1978.434212] SyS_sendmsg+0x27/0x40 [ 1978.437744] ? __sys_sendmsg+0x120/0x120 [ 1978.441802] do_syscall_64+0x1d5/0x640 [ 1978.445695] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1978.450881] RIP: 0033:0x45e219 [ 1978.454085] RSP: 002b:00007f6a1ccbac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1978.461788] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1978.469050] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1978.476311] RBP: 00007f6a1ccbaca0 R08: 0000000000000000 R09: 0000000000000000 [ 1978.483838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1978.491107] R13: 00007ffe46e6d05f R14: 00007f6a1ccbb9c0 R15: 000000000119bf8c [ 1978.552024] cramfs: wrong magic 05:04:48 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x800) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x483, 0xa00) lseek(r1, 0x1a, 0x3) 05:04:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, 0x0, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x200}}, 0x0) 05:04:48 executing program 3 (fault-call:5 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:48 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:04:48 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x2}}], [{@smackfsroot={'smackfsroot', 0x3d, 'cramfs\x00'}}, {@hash='hash'}, {@seclabel='seclabel'}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'cramfs\x00'}}]}) 05:04:48 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 1979.396755] cramfs: wrong magic [ 1979.399615] FAULT_INJECTION: forcing a failure. [ 1979.399615] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.416460] CPU: 0 PID: 31852 Comm: syz-executor.3 Not tainted 4.14.213-syzkaller #0 [ 1979.424345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1979.433689] Call Trace: [ 1979.436272] dump_stack+0x1b2/0x283 [ 1979.439900] should_fail.cold+0x10a/0x154 [ 1979.444050] should_failslab+0xd6/0x130 [ 1979.448029] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1979.453131] __kmalloc_node_track_caller+0x38/0x70 [ 1979.458072] __alloc_skb+0x96/0x510 [ 1979.461698] netlink_dump+0x21b/0xad0 [ 1979.465509] __netlink_dump_start+0x4e2/0x740 [ 1979.470006] ? genl_lock_dumpit+0x90/0x90 [ 1979.474149] genl_family_rcv_msg+0x95c/0xb20 [ 1979.478555] ? __lock_acquire+0x5fc/0x3f20 [ 1979.482786] ? genl_rcv+0x40/0x40 [ 1979.486232] ? genl_lock_dumpit+0x90/0x90 [ 1979.490378] ? genl_lock_done+0xc0/0xc0 [ 1979.494344] ? genl_unlock+0x20/0x20 [ 1979.497517] FAULT_INJECTION: forcing a failure. [ 1979.497517] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.498049] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1979.514206] ? __dev_queue_xmit+0xc96/0x2480 [ 1979.518595] ? __local_bh_enable_ip+0xc1/0x170 [ 1979.523167] ? __dev_queue_xmit+0xcd6/0x2480 [ 1979.527567] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1979.532155] genl_rcv_msg+0xaf/0x140 [ 1979.535855] netlink_rcv_skb+0x125/0x390 [ 1979.539899] ? genl_family_rcv_msg+0xb20/0xb20 [ 1979.544468] ? netlink_ack+0x9a0/0x9a0 [ 1979.548353] ? lock_acquire+0x170/0x3f0 [ 1979.552338] genl_rcv+0x24/0x40 [ 1979.555612] netlink_unicast+0x437/0x610 [ 1979.559682] ? netlink_sendskb+0xd0/0xd0 [ 1979.563743] ? __check_object_size+0x179/0x22c [ 1979.568321] netlink_sendmsg+0x62e/0xb80 [ 1979.572379] ? nlmsg_notify+0x170/0x170 [ 1979.576351] ? kernel_recvmsg+0x210/0x210 [ 1979.580492] ? security_socket_sendmsg+0x83/0xb0 [ 1979.585229] ? nlmsg_notify+0x170/0x170 [ 1979.589197] sock_sendmsg+0xb5/0x100 [ 1979.592904] ___sys_sendmsg+0x6c8/0x800 [ 1979.596868] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1979.601617] ? perf_trace_lock_acquire+0x510/0x510 [ 1979.606541] ? check_preemption_disabled+0x35/0x240 [ 1979.611553] ? __fget+0x1fe/0x360 [ 1979.615117] ? lock_acquire+0x170/0x3f0 [ 1979.619076] ? lock_downgrade+0x740/0x740 [ 1979.623227] ? __fget+0x225/0x360 [ 1979.626673] ? __fdget+0x196/0x1f0 [ 1979.630206] ? sockfd_lookup_light+0xb2/0x160 [ 1979.634698] __sys_sendmsg+0xa3/0x120 [ 1979.638480] ? SyS_shutdown+0x160/0x160 [ 1979.642441] ? wait_for_completion_io+0x10/0x10 [ 1979.647112] ? SyS_read+0x210/0x210 [ 1979.650828] ? SyS_clock_settime+0x1a0/0x1a0 [ 1979.655229] SyS_sendmsg+0x27/0x40 [ 1979.658753] ? __sys_sendmsg+0x120/0x120 [ 1979.662805] do_syscall_64+0x1d5/0x640 [ 1979.666714] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1979.671897] RIP: 0033:0x45e219 [ 1979.675101] RSP: 002b:00007f6a1ccbac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1979.682827] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1979.690097] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 05:04:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, 0x0, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x200}}, 0x0) 05:04:49 executing program 0 (fault-call:0 fault-nth:0): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 1979.697363] RBP: 00007f6a1ccbaca0 R08: 0000000000000000 R09: 0000000000000000 [ 1979.704629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1979.711896] R13: 00007ffe46e6d05f R14: 00007f6a1ccbb9c0 R15: 000000000119bf8c [ 1979.731356] CPU: 1 PID: 31868 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1979.739253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1979.748589] Call Trace: [ 1979.751158] dump_stack+0x1b2/0x283 [ 1979.754768] should_fail.cold+0x10a/0x154 [ 1979.758896] should_failslab+0xd6/0x130 [ 1979.762848] __kmalloc+0x2c1/0x400 [ 1979.766364] ? SyS_memfd_create+0xbc/0x3c0 [ 1979.770582] SyS_memfd_create+0xbc/0x3c0 [ 1979.774620] ? shmem_fcntl+0x120/0x120 [ 1979.778485] ? __do_page_fault+0x159/0xad0 [ 1979.782697] ? do_syscall_64+0x4c/0x640 [ 1979.786759] ? shmem_fcntl+0x120/0x120 [ 1979.790646] do_syscall_64+0x1d5/0x640 [ 1979.794533] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1979.799701] RIP: 0033:0x45e219 [ 1979.802868] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1979.810560] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 000000000045e219 [ 1979.817916] RDX: 00007f26df403ad0 RSI: 0000000000000000 RDI: 00000000004c2c87 [ 1979.825165] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1979.832410] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1979.839658] R13: 0000000020000240 R14: 0000000020000500 R15: 0000000020000640 05:04:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, 0x0, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x200}}, 0x0) [ 1979.852509] cramfs: wrong magic 05:04:49 executing program 3 (fault-call:5 fault-nth:5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:49 executing program 5: r0 = syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000640)) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x5) 05:04:49 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000002c0), 0x19}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd21}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x101481, 0x104) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2a}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x15}, 0x44014) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r3 = dup2(r2, r1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC=r5, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRESDEC, @ANYBLOB="2c7375626a5f747970653d2c646f6e745f61707072616973652c00910b8b"]) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRESDEC, @ANYBLOB="2c7375626a5f747970653d2c646f6e745f61707072616973652c00910b8b"]) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x101040, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',blksize=0x0000000000000000,blksize=0x0000000000000000,blksize=0x0000000000001400,max_read=0x0000000000000006,subj_type=/dev/ppp\x00,measure,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',fowner>', @ANYRESDEC=r7, @ANYBLOB="2c7375626a5f726f6c653d26405b002c737562dd64169e6a5f757365723d61d88373d2fe78e512457cf99875c1bc2478c90ea0d1ab985657d319590e424643f309e5bc1a6f3082765ba6b932f7f164b044f93509400c1a07b7e81d7f37902efd778e36440c95f395df31b6e131ae8f84c18d5d618824b897a771a54d14a1dc359341fbb6fc581a9e339ae5bffd63fe3d7d91cbfe49b08e"]) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x2, 0x4, 0x5, 0xb0f}}, 0x20) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x2, 0x0, {0x0, 0xfe, 0x5}}, 0x28) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:04:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x200}}, 0x0) [ 1979.958568] cramfs: wrong magic [ 1979.967226] FAULT_INJECTION: forcing a failure. [ 1979.967226] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.009151] CPU: 0 PID: 31887 Comm: syz-executor.3 Not tainted 4.14.213-syzkaller #0 [ 1980.017062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.026412] Call Trace: [ 1980.029011] dump_stack+0x1b2/0x283 [ 1980.032638] should_fail.cold+0x10a/0x154 [ 1980.036784] should_failslab+0xd6/0x130 [ 1980.040752] kmem_cache_alloc+0x40/0x3c0 [ 1980.044807] skb_clone+0x126/0x9a0 [ 1980.048344] netlink_deliver_tap+0x655/0x7d0 [ 1980.052750] netlink_dump+0x758/0xad0 [ 1980.056546] __netlink_dump_start+0x4e2/0x740 [ 1980.061039] ? genl_lock_dumpit+0x90/0x90 [ 1980.065187] genl_family_rcv_msg+0x95c/0xb20 [ 1980.069592] ? __lock_acquire+0x5fc/0x3f20 [ 1980.073822] ? genl_rcv+0x40/0x40 [ 1980.077281] ? genl_lock_dumpit+0x90/0x90 [ 1980.081422] ? genl_lock_done+0xc0/0xc0 [ 1980.085388] ? genl_unlock+0x20/0x20 [ 1980.089098] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1980.094105] ? __dev_queue_xmit+0xc96/0x2480 [ 1980.098523] ? __local_bh_enable_ip+0xc1/0x170 [ 1980.103103] ? __dev_queue_xmit+0xcd6/0x2480 [ 1980.107514] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1980.112100] genl_rcv_msg+0xaf/0x140 [ 1980.115815] netlink_rcv_skb+0x125/0x390 [ 1980.119874] ? genl_family_rcv_msg+0xb20/0xb20 [ 1980.124453] ? netlink_ack+0x9a0/0x9a0 [ 1980.128335] ? lock_acquire+0x170/0x3f0 [ 1980.132316] genl_rcv+0x24/0x40 [ 1980.135588] netlink_unicast+0x437/0x610 [ 1980.139733] ? netlink_sendskb+0xd0/0xd0 [ 1980.143792] ? __check_object_size+0x179/0x22c [ 1980.148387] netlink_sendmsg+0x62e/0xb80 [ 1980.152448] ? nlmsg_notify+0x170/0x170 [ 1980.156417] ? kernel_recvmsg+0x210/0x210 [ 1980.160571] ? security_socket_sendmsg+0x83/0xb0 [ 1980.165328] ? nlmsg_notify+0x170/0x170 [ 1980.169302] sock_sendmsg+0xb5/0x100 [ 1980.173011] ___sys_sendmsg+0x6c8/0x800 [ 1980.176991] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1980.181749] ? perf_trace_lock_acquire+0x510/0x510 [ 1980.186680] ? check_preemption_disabled+0x35/0x240 [ 1980.188114] cramfs: wrong magic [ 1980.191691] ? __fget+0x1fe/0x360 [ 1980.198469] ? lock_acquire+0x170/0x3f0 [ 1980.202443] ? lock_downgrade+0x740/0x740 [ 1980.206601] ? __fget+0x225/0x360 [ 1980.210069] ? __fdget+0x196/0x1f0 [ 1980.213603] ? sockfd_lookup_light+0xb2/0x160 [ 1980.218123] __sys_sendmsg+0xa3/0x120 [ 1980.221920] ? SyS_shutdown+0x160/0x160 [ 1980.225891] ? wait_for_completion_io+0x10/0x10 [ 1980.230567] ? SyS_read+0x210/0x210 [ 1980.234186] ? SyS_clock_settime+0x1a0/0x1a0 [ 1980.238720] SyS_sendmsg+0x27/0x40 [ 1980.242257] ? __sys_sendmsg+0x120/0x120 [ 1980.246297] do_syscall_64+0x1d5/0x640 [ 1980.250182] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1980.255357] RIP: 0033:0x45e219 05:04:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x200}}, 0x0) 05:04:49 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x3b, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x25}, 0x0, 0x6, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x90000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000000)='\x00\x00\x00\x00') r2 = fcntl$dupfd(r1, 0x406, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ext4_da_reserve_space\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 1980.258520] RSP: 002b:00007f6a1ccbac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1980.266202] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e219 [ 1980.273448] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1980.280693] RBP: 00007f6a1ccbaca0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.287946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1980.295209] R13: 00007ffe46e6d05f R14: 00007f6a1ccbb9c0 R15: 000000000119bf8c 05:04:49 executing program 3 (fault-call:5 fault-nth:6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x200, r1, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x200}}, 0x0) 05:04:50 executing program 0 (fault-call:0 fault-nth:1): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:04:50 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x4, 0x4, &(0x7f00000001c0)=[{&(0x7f0000000000)="bde29fedc0b95232a3f61357c19c5de8f642901cacc1cd284222f240049301cd50170579f235093f348df092effc72df9f9a301f15c4a46ee0fcf42f2b32ce0d570a00d7880ba92742da7ae421d176d20ec99206548ec36eeacd8a7c5e15f7f41b008580046f7eaeb00b10d4e4df5e70c959c49d6657c4780673a2e012437660c15e4e72b21d817db8026dba49f6814c6b8166e32265830159a1353c4db5465a52225e2ec6642e0a79b42f0d6ba4308fe07d19966c60b18dccc077d07e47954b5a8014007a3bc33a792dfffac0af09872af617c41e846b484070998885b6ac433b46b3b06b253783fbb9a6a49dc7b26e9b95e8d2c09c9610fb5b94b0", 0xfc, 0x5}, {&(0x7f0000000100)="b10f426ae4b8f52b5ad6ff09fb27ad1c54f8f7508083961b043711b6097768c511ff31af94cb62db03751d5e66bc6bdc6da12e625a013b356fdc3e15fbfb3c0ad2596e74f4e2b63c08e34c7edaf7adb6ee9a232cd5ed4446f1738a1d5c35da6c0000ad829ca9da5c0082aef2b7e1a650005e9d3ceab2c03f12c5a9f55f281a103327e83367ac489840f6849561378226642953401bcec198456b57cb1e4f8c942939d30bfb553094be390d5b36ab7d08", 0xb0, 0x42}, {&(0x7f0000000340)="0ec579b1601b0aaaae780b11a7f5581a189d9a657a0461b7a1139b938ae98dc95cd3ba9d6f054fe7bfec3560910ced979f9359773a8d922053f4aceb1a95d99f0d5488864c12afc1be7b700e9a96cddd3cda01126ba2f1506c4b6b01d4e5b54f2785254b0f707dfad17cf4b191e922ab89dc964b2ae33ed83a8845daa2498953fff377e201db2727aa935205d91c6bcbe52b59bb41880647901aa28fa2114d40c478483cbd979b77a8ed55d0cb019c078ed172149fc5f619c2ced6c4bf9c1b6094847b42cfe620433567dc7177a2532e0f378995f9593926f7cb561464a178c473c492ec6b385aaf6fd27b82f549a6b917", 0xf1, 0x7}, {&(0x7f0000000440)="b8fd42f6c8dfacf2d43002763730fe0da1d3f7723b156071d16d36420b24b9710173f0118449d56a5e8efe5bc3c97614d522915496f7a4d6bfdd1f261ed6e8714d42ed8e02c7483b4de6edab9999bc598581ff26a04aa245433ee4690465a91b216f083ccf11674b24d1255b9380a26c8c2f86e52fd4e076fe300d504127359b7e3dc534212b71a7613520d292de93a9fe710c409348ee271bb1621378e9ade7c341a44d616eccc41a7a57f16ff13a1589fbfe5a85ce6b2440cd736fe9daeb946ff86dd967e706d41944dae97d64d6f54b7162a1279a9f907ef3ea38adac54c17198c2ddadad112f", 0xe8, 0x2}], 0x0, &(0x7f0000000640)) 05:04:50 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:50 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000000c0)={0x0, 0xcf5b, 0x7fff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x20008081) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000000)={0x6, 0x0, 0x4, 0xe000, 0xffff, {0x0, 0xea60}, {0x1, 0x2, 0x3f, 0x1d, 0x0, 0x9e, "2b63fcf1"}, 0x6, 0x1, @fd=r5, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:04:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000041}, 0x4000000) setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.origin\x00', &(0x7f0000000300)='batadv\x00', 0x7, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1f4, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x1f4}}, 0x0) 05:04:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1f4, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x1f4}}, 0x0) [ 1980.567183] cramfs: wrong magic 05:04:50 executing program 3: getsockname$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_pwait(r1, &(0x7f00000001c0)=[{}, {}, {}], 0x3, 0x10001, &(0x7f0000000240)={[0x3]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r5, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') 05:04:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1f4, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x1f4}}, 0x0) [ 1980.595465] FAULT_INJECTION: forcing a failure. [ 1980.595465] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.628016] cramfs: wrong magic [ 1980.668653] CPU: 0 PID: 31946 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1980.676684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.686033] Call Trace: [ 1980.688636] dump_stack+0x1b2/0x283 [ 1980.692265] should_fail.cold+0x10a/0x154 [ 1980.696419] should_failslab+0xd6/0x130 [ 1980.700395] kmem_cache_alloc+0x28e/0x3c0 [ 1980.704547] __d_alloc+0x2a/0xa20 [ 1980.708087] ? lock_downgrade+0x740/0x740 [ 1980.712249] __shmem_file_setup.part.0+0xcb/0x3c0 [ 1980.717090] ? shmem_create+0x30/0x30 [ 1980.720885] ? __alloc_fd+0x1be/0x490 [ 1980.724709] SyS_memfd_create+0x1fc/0x3c0 [ 1980.728885] ? shmem_fcntl+0x120/0x120 [ 1980.732768] ? __do_page_fault+0x159/0xad0 [ 1980.737002] ? do_syscall_64+0x4c/0x640 [ 1980.740993] ? shmem_fcntl+0x120/0x120 [ 1980.744882] do_syscall_64+0x1d5/0x640 [ 1980.745598] kauditd_printk_skb: 4 callbacks suppressed [ 1980.745605] audit: type=1804 audit(1609823090.378:8812): pid=31961 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1699/bus" dev="sda1" ino=16146 res=1 [ 1980.748771] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1980.780423] RIP: 0033:0x45e219 [ 1980.783603] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1980.791314] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 000000000045e219 [ 1980.798576] RDX: 00007f26df403ad0 RSI: 0000000000000000 RDI: 00000000004c2c87 [ 1980.805840] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1980.813104] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1980.820389] R13: 0000000020000240 R14: 0000000020000500 R15: 0000000020000640 05:04:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1f8, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x4}]}, 0x1f8}}, 0x0) 05:04:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r2, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x1c}}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)={0x2, "2fa2"}, 0x3) 05:04:50 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="3d60152e3d0f2d8bfc6fb3b2002245583d42be9785820e1058942c81af32272c80e9be37a060f438437f27c310cebc9d3c49b9cd7d55900ef487b39e57400fc2103abaad5b6025ffe79e", 0x4a, 0x1f}], 0x0, &(0x7f0000000040)={[{}, {}, {'cramfs\x00'}, {')@((\\&-!^%'}, {'k\xfc{\xa38\xae&'}, {'\xd3?;\x1e\x92\x91e\x18\x83\xe0\xff\xc2\x8a\x92g\xd4'}, {'cramfs\x00'}, {'\'^'}]}) [ 1980.996958] audit: type=1804 audit(1609823090.628:8813): pid=31970 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1699/bus" dev="sda1" ino=16146 res=1 [ 1981.038624] cramfs: wrong magic [ 1981.065169] cramfs: wrong magic 05:04:51 executing program 0 (fault-call:0 fault-nth:2): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:04:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000000)="bd8cea812a539161994f12bb418321cbbcfc74c50219605ea8fb99852c65050ca4b6b699e36959fbabe38ddb7f6a9d1e238ee0e809a294519c529ce3cc4111039fa4cce84656221be8a466485b19d7c51bb72407eed6b54985a127051afe00d30ed396c12d2fc1e059a89d663f5fdd5451eed016a090c3a3b5260bc7e1a41a75aab4001086d4a70b1bebcfeed7d29d16db1def53dd649a74742703cde4eba4703287afd5f2f151ba9d03c4dd390d07fcdc58826a22ad05a66dbf4e8fa9aaacf4497976edd8314b2e9544a4b168aaa6cd93ff2fb741a48345ac4cd671f9919d3ec824f24e37", 0xe5}, {&(0x7f00000002c0)="5d6dee9836f6c64b9b45ebc55b4cde68027f01a680b85abe6e7c050c726664ec16d4ddafdddb9b96b3062879ca2d86251b11999a155b32451f1598979037a6a55912f444122ea840bf03dd63d518f05574cad223d0188a327eb3621b6574319b55c2bdae6ec8dc293ddb3ffbadfc334d730f95735cb23ee86a0fc3f05dfea1269c1d9997ab9e17be9509ee7caf1717855ac8241f245f97c1d04280a3f4da3a4675289c21b35e2f0b55bddfe9a5079240025f7725c2d5", 0xb6}, {&(0x7f00000003c0)="9aa8831b6d402766ac1b3cda16d9e32130077ed5413a0f72f67b4994a52811a471b4d55b4d19ff574628bbcc1a1d595d598f4f0aac38d109b475c7d60afd1f305ae147a42a342dd51854d073d4fcf74d2ff7338f2af29c0cca8a7026337f34e83a35a140993f8ef081114b686d712fcd7b9eda6c9f2f0b58350798b4236be51b413ab89ec4494d40c8cc9e7ecb9f01b22d0f779abf715da8dbe0ac2d34c19fd5bd7923496e5e968417a10872e09f21cf0e9ff22af0b7819bc87be6c8a2ad99b5275c694e3f5ecd9c86cbd7", 0xcb}, {&(0x7f0000000540)="fbe5dfd4c609bd5d492136a2c6fcb1aabb754ba2d1e60812c268e8a3a38ac27dba4fb12b8a46882cd798110c6863c562cfb022a62540c7237ae569a7d23f999bcf82efa1975ad1b7c6c88eb2353adaeae8b7b8f135ae972294b8105cbba972fa7900758754651ff0ce25620d0a5fe690c70e5d6a1624b1b753bdd9a34c997421d83d20aebeab3e9fa854d9e539bb18452e7ffd05e925e0e58fa0d0a7c37d2e305b8d6aa4574e4640ac4e3e11baf51562bba84369770bb8cec44ffde76f435bf1ffe44af97b5c210af6991739c6301b0a6725a57b46bb4576cecb977317a2f4805de5c082d57028d7611586be22c1cc9f0d9ed51a11588fddcd56797858c16438619fdea02797d46479df3521e03229c29d117d7665feaf63b65b167bb4f5a4f26abf53af77ead65e878c3a0b73bb14f4fb6db2cc91fe7823829955c07b303fef9fabef1d53227415968a7bdc04857e8205de45e0ff95fbf854e362255ed452997ff1a535a04cc51d7d5cdc2f811a4034cbbb81197b2fa06566f6c283c1688ff2e685ee460f1eb6f2bab334fe65214d3fed72e5a4ca2cec6505547015bf4f95fc675e867cdb2b5fef57851c1a3c68a53fd4cd413f00a5674697f377f9ddd5136fbf14389373244489d779c4c4be7a407b215ac6929da6904ee00eede7ad9b2c1257971cd80b71aee2829955079a4a222868971a61c36eb0b6c7e227d1269032fb6c893daf87b1879a35035e122d7c2d4953a2d9973eece021a442abd49facd22a75ca20f510246f0d0c923cc2a8e9b644c7273977f8e5486de29f2e437e545b36c30a0da4f781b5fabf4b153b881dded8a5c707596b928041b11d5552d381037967e4b30be9bdf2441a8b8528210f7e0d0fcb93761ba95e888565ff80b94397fb847ce70b5f035b77fe77022ae686cb5fa2082b1487d74130d8235a073efebc1dc1dd147cfe9ce4b22d9307a6509a397db31f4fbb2a734df3a768e2d7c3af631f404a5496a51f95356cf9018159c466da7d1c7e4fb725db9847b01c105e329b19b84209843ddc4639a3b9f327a3c6e05b91559d06feeb563d8253401885c87a7db5d33b71b009af5d0505f3e1c73cf2eea4b0f2b4bb3f7f4be933eacd55886d2d2e9e9c55f460f6d6babc7c7205bab63a4f1a4667b1569a3ed8a30554659c69132988aa0ee720bdaa83695d51044bf468d498241ffc865e835038c36efded563f7783672ef03ff6f920e73e3684fc44a08be55a18099921a8a030063a1dc602e9cd627a0b60f207e614c071733ccd3793683649780ad727de1154387e5b25756a0a92257f36fbecd8bb53ff5f8cbc80c2fc06bd1312f995389690b9657aa234b96e5855f007f090ca4f849763f203e32edac163d0c54585fb2c2e7dc2eae8b64c606b638e6d6d18964b7baf8232ac71898b9de6d4b029414c8e14cfb37638c347b918d178325ddbaec39e6d7d812b084f4af7133c16174f46507cffd1b7daabb102dd4366d8ffc957c4aef7a84796038f88f43039fb85aed7e4a8a32a0d32cd0ed26cf351d85f381dd72daaa09e88c5d1ab43ea6d7d97d7848daa3b84e1374660f11248abd183209487af4af1ea2a37aae2511ba61bd0619b3cccbbdde25726ba6aabda6b3d79a72d3adcf3af23d40aca1006d973f1a95fea854303f0c79703fa9d76da41fac0d1e629268fc09c3afe1a3211eb9111b63c9ef510a5d3e08f36e8a6b012a7d0043eafc31bb8db75f9b0438402cf7099667815304e0450a689fe67abc2cdc3d321bc83732f596449b54759558c7fea65af9ef0b9a683ed80efc93366a01ae47195dc6fe095ba1f4db0b6766709d3fcec7f508216a576312ce44a49999f8db85bac4dbb4051fd58951db528ce812cfa8bb4981007e1bf56dae3b0bbd191796e1641be5290d8d047f0ee8d5f636f72f13d2f9cbb701846306919057ba5e7b49a772cf5dc8a808c02c0d325eb10e4c603eb51cf0ac8717ca079575766497ea70f0711a71c58b83fc198999176d5b0128bc1d8b87fd04030594c8ce83352ba15c193ae54e353e394073bbbffd893c296d6c75943221fed948daef279769e9940dbd108b05d8533472acf2530c1ce01c81c41f1addedfca56d5a177e27da6ff0e3063a14c8dd5a2c1401edd1d679ef43ad79bfbffced7abadb48abf2052ec7a0bb5e552875943b90510aa01b1c63923b32cde06cd720099fa35c2816a24cfbcfadbec7c4a9f07ae0868341013250afc6f52fee0a87aeabd14e8404c6a1594310f9a68a44ae38cb763f1024c6c3b59b7662a98588e4d665f8b4780b436477735e8a44f18de6059de96c75c72695072b823cbb2c6724558895243dd6b8528c8534a9f03b4a894b9c01ac3377de7e05b7ab8a294b5e98cc5fce34cf365a763e2c802ebebfaf590ad7be1cfe1115e93773c2792596b33e18d8f67763e821cf1eadb6e675ae8edcad16ade7fb7e59d5bc8ba405bac32a4ec2a41112a81f6df9a6da86c0696e81fe8bbd37979aaac42f284807200d9c38bd2d0d99289d722d8bade783634976ce129f4676c49ef88da5264d70c1c6c22f07c6ae88de6a0e0ea57764ccb84311db5918eb8746f2e72c5ee279f2d934164927bee0bffaef23378bee7d7c04373bb641ca943215d9d88a6bfa1131b7549069404890fa4e4e0cc7fd2dc749cd7bf74c86ee2217fd8f7362a9d514b31d4249f9bf405d00fc3aca6bb02f0ff717e77ff82b39756e1e761929453a9f54ed6539bc4b0757816f5a6e739b972d4e9cee4530879649543d43b81c50bd355ba3f1a88b566a9f3ab4be9e78c037a2cd69fbf4e47bd621992284a646d2cd5b1df59b929f3b63c4e0a58d70f4ce7d96fca476d544efca56902a9c3136db44b7f342ede4f68ef29ec2cc50692e094ad9a4106ae2ea6dfb665e0ce44d7fb6c7d754ffd8ddb8f011789f41b3c68fe78eca4b3dd251c7f75afb2125c0bd0a2b8593f690c76defb955be48e16e710f06bee36cf91358ef1671eb04b1d8c0f9b16b322af5b3e73893bc757f8ab1cbeda923aadc901c7d060d8be8f1f4ee69292b9f68fa07bdd8ce7c807dd56415a615bfa5a4b261d516f3fa2a30e3844d3bfccc6ff5f526f5f20796d70ac3e2233cca82885b98fb67a9e7f5067d86a194112239370d8fe812672a06ed9f0dcc38871c83c40bbfa0a57f9e80f443fbb07be5237ffbc9ef789663294a046b45d6f94cf8c36801f50e30d61bdac76561242d5beefa76192125ffd56e113f888b6f60f6a76507d4e6b1f28d3df156b0abb0ed7652557d1d52c9a71e10f346e1ddb1f5061c9e648ebddaae67ba6616bf609ac01dac4c6332c00600fca08a9b7c0dc9453ea6a0f61c64500f595c6b768d45e38c3290375eb6136a954c061c240b039234065ca798fe95746c81f9c7ea334a1e734f6103e6946c93523b74ccbc14b75c02fd0e90906c113d298931e75807c4d85b41f50829987df6781e3ea2eada2bd2a774c7db49ebfa2c62ac33c23b0920adcaad98b4a3ba12fd9bd0fa309600cbd4be5c1e5ff070db0bef6eee1839058c9d4f9b20e198771901faaf2eeeedf540267ae795427ff2d1c6f88e8e52cf6279bbe022823362ccff6a47fd21133248c4cb9290f77617b4a60f7b205d046a93c5cf177d4764aa5388d86a8de3988091756a5f56368a083a874ece9b99f714d00462683be8d9e97274496d4d931e2b0764ee0bc4dc19d36fd746eb45ec6ae13ba6a9fa7c09eb68f95f4234f5d85efa3959a64caa3beb00f2c68e4d7fb9f1727217e7efa3bd147eedfe7e4215721b408984fdd4f336ffde31d23ef51a22dfc7dd4a88090d188434870ce8ab09428795a0e933495a48b3fb9691814f6734b08dff8bf493a136231d64d1ae139b4ff047aa83e279a846bc6f704a2f6a91de86198805aa3dd787adb8fa8888d4bddb6e860e69a233654ad6864ad8fe18eea9491fc1899d6277a3f5487519c7c8f025555d8354acf8aab50a9efbc857042fe22780c8fa68dcc4ca2e83a7acc876a5374aa3685ffe4624011b606a042e57f90ed7ec8c51f14f72d63253e7b31da1e7e5ae526ab70daf610f50ebee80b52f79285a839c2b8249fabf4232f485c71c59671bf36c9b0790a1e101c04fab51df72f73f0fa5fa371c9f0fb8f853cc7dac6e62f0e350341cfdfc3211933cc89cd60c7b98caa114450b813faa22ae37d33b95a4ce4bd5a68fb6bfbe1ea098e70c31f774b914eb847565e991a76a1ef126dd557358cb9181c00af048cf21a2d93e301d632a3381b90721eabc3d50dc13ac5aef6e9a9ac0d408a74c782819da37a212069533764ae6b4e4386d746f0431511c579184233b9421122a52fdd142a18c73fcb2606e7e312f4a916f68b4a1f954380e5078285c9da8b4fb14caaf6ea38c2754bd60403ff59f9977059992897bfecd86d7eccd3cb2dcd8e4c5462525beabac303aa500dc1697202194621deb48c8a2409c5aa34857be234160d6f6d903f0e7795dc1bfb93bb284d8068b65492805dfb31b77d07510499d532907f38f928b19365587d0e7b2ac58d6d62b94177625da792aa6903f9f1009e79b130a09e5232918008609f27f910bc0ab27080feb2bf20a566ee26e91c11fa1d492aa309d4ea68746e5dad3897163b804c7bd10112b53b228b3b3b88f9dfa58ea9a6f231b18c68dcf3677d548ed05cfd0acaf16b2d2ab548e3ad46f8e301f3cec691af09580b841082f73bf3037c2485d6052a2e0b527c3fcfa1af260aac7915dded90ec153e616847a002df6db804c98ddb527e7883a02c3337eb9d238f4e44d9be46b7794ed66cff7be46ca15448cda1dcb4efd77abd195983865791f41e52c336dd6425cf884682d13ada13472fd6ff48e93a17a962ec3f12a0fb771d685e376f56967700eee9b080422665fcc63857cefb69d3472fee4b7e287e5520d5827c21a14dca5af02d3ae32bbb1e91ac929ce178fc1017c803403f2a4fa1042ecc26b66b351ca9ee9395614eca5ae602f6accf666be39ad19882a361ef0776da5d9a7f475bcf737df4ae354c80d9b1f3a031d38a70646be6b5c1b0c1e650f9cc3de71359612e4da200da31668d4e419a0e456780c2762d62ba9c3b1057f3b281b077f033be110c29afe208bc3f9828583deaeaafcbb2c4354a11f3ae436ae17f864a2a7ecda098ecf36498e556ec6716268bca025cc83ec7efaf3234277dc3f977abb506ccb71645e31f4166984c3a0b14de0d5572a7a5b490c9079b156662f87b80f53222fc8df438f14212f9f40f8ec2f7600616834f6e6db6834b6ff4f3481b9aaa29e524964ada3e594092f1583a1ba45ad62dd7ee63b5d76f69a79e52a7ba010a72b80b87aca41e3bd2e577ef8597837a48eb9317dba6109db2526430189275e5c98f1c77002915911f8bb495e43d16dcf7aab97605275eb22e3e81772ba5d0d171dca2f6ebef1560d8bbf70c037ead67120b214ff209ef011b829f495ee438e87154acdea2d1184a74a76d2f33cd2c49f245744d2eb4ea1e91b61e3eb601e4dd1c60571aa028b18f483c13c6de8a513c95abf855e1cfa1aa90c858e035dcb73bd35a674d4e49e7ea2538a4a148d07dd6e3111e33561585ce677045c650e8026efa6bb1080dfb30cce709cd6b2c8657d374aaa59cba286fdce03689435468803e187f645abc6de89bf0ecc43cc1e9f74f99015fe2afa45ec5b0d2860fabfd5181befbfc6035e587124a7ceecd28a702eb448a616d74ecb7be374902df4ebd07d911c0ec82018b2753c3184f2a687061704f9dd64c654ca83e1075ac8917605eb8", 0x1000}, {&(0x7f00000001c0)="a9a3400b", 0x4}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="7c607eae116b2ebf84f4924a6ee6d09a22e365afac993daa0dbd39bcdac89b53f83e6fd8ed5a52ac956e4896e34fc247855926db9cbb18654ef003ba25f1ca8283700ed7057f81aecf18be28e050acfad11ce75e5d4fc9dd6b28093e85008818f731da643b7a5db931f844bf6dc79bf6f43a6bd45182da453fe6ebc34e4a9ff73aca2486556c89cf", 0x88}], 0x7, &(0x7f0000002680)=[{0x58, 0x10f, 0xd1, "8c7528347c011ca4ad6a535a06a136eeaf30eed3fc17b7ba7d276fd97d89a80807f6f8dd0bf06c17e6539241fe7e688341ad5c10a39a30a2fb5bddd4fb4d18778af4b6859feb"}, {0x78, 0x110, 0xfffffffc, "d572151b6e722e0fa9d9436958409d13e744e8c6e48371f366489becae59737582647a807e847444ad1a28137cff2d8b2232588def7aaffd01e5fb38d47ec00f0b06f8631691f8e3d1f4c35b577779eee1a8e723a90113eb350313ccc61ab846cc695b"}, {0xc0, 0x114, 0x9, "eb4ceff704fcf3beeee3b81b56ecaf0297e65800198a3146df19721ceba3e6e4155cd2c88b880799cde4d66fe7793c161b92af60331ce3a42d7f5d3753b520d4e36f0864fc44b49f492188070141169678b9f517b8684e97af7ebcd8cc80ed8568a5fe2d42928ac4e478c0f4158d7d30f5a758552020f7f7d3cb64cf30874f635ea0902421839d7aed4c4551f22d3157e14a47bc9200d3c250e131cf95cdfb54931d0b2de29ef180b2794a35fcfd"}], 0x190}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002840)="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", 0x1000}], 0x1, &(0x7f0000003840)=[{0x50, 0x107, 0x81, "021b8670850f51ded9bc18adcaaecb3f6e1fb7327d51557f669f26cd40aacc7bb3042605f07d5a9992736cde676af6cc705bb704a43b510504"}, {0xe8, 0x113, 0x4, "a0492863070a935fd28478ae51a8d88e5b60fd449cdeba6124c02aeae3abd2707e9bb55e1ef1b25bf1d92c54562965316c30b30b08a094414ecb3c378ec653278db51d860872c2acd4d2210252e6b6d3b133236b6d08dbd5f6d79172fa0b0265a308ddb4847f11c2c38466cb03e9ad55a57bfeea75ac8a2208d8fec4643c4e03bc6dfb38c8429f165955dff488841a6a7a9e3d864b92c9f03fa262ce353564c5bb7be09b4815ae43ff361d647623070e77154224f649172938453e2974a8e331b5951b68330a281405e9187fb401d091f64d5919"}, {0x88, 0x107, 0x916, "3d3f623bc2efea5be83e808f2ef5141e5eb8fa15ed797bc6dfc8fb19aeab37c78932588b21d7ba8023023eb37a7b23babdaa7eadbc822758bc070d0842502e530a9f5d16cab961034320cf0f221889910382ae9f4d6e7ae02b997445dc52a02cc47929ab83260631ee3c076a90f97fb399"}, {0x70, 0x112, 0x7293d22b, "5d5d36c7d4c675c69a33e94575d090cade5fdfa15a33771093998b5e12a74a473bb58f47a30bec9c66ccc46ba24781594842fcd2703fab0c5d27caa1c07d2f540db5a8103f336fc824070987c41b226b57b96e1da20417c116"}, {0x88, 0x10b, 0x9, "d1eac9121313a0030ca75cee6f4e52204a97d107ceddf3fceb95d5f78e6a05a73b92b8760f8c12fcef8f292ec590abbdcdda4ad83932e19fce6e540ccc376f2a42358e248571aeab0d1dfaebfeb1eb47b4a8793fb571dfe93c40ce00eca8ca0f895869d430f10788467b27fa82aba4601ec3"}], 0x2b8}}], 0x2, 0x4044044) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:51 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:51 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x400000, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)={[{'cramfs\x00'}, {'cramfs\x00'}]}) 05:04:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1f8, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x4}]}, 0x1f8}}, 0x0) 05:04:51 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r0) fchdir(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x657402, 0x0) r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0x80}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r2 = syz_mount_image$gfs2meta(&(0x7f0000000000)='gfs2meta\x00', &(0x7f0000000040)='./file0\x00', 0x101, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="08fd2d4f7de9e84ba11a8bdad5b4f2184cc78bd4bdd3fb783b4823df0f6a3fa32b71865f47e2b58bbba858bf5e8f129fac4c94635fa8e0c8f34584ea1b5abfe1f02575091aace410177c4da222c522f1108e9a2f7983ce594ad33e601ca1872387ad7c0b9cd47d044ce2752022d2a15d84e286ee459f8c2f2b811d22dc8d91b6399ccc34fd7c75c2a6fd8577d58ff299c114baa7f0cd8ecf8f3edba812ba36932aacb69960bb6fa37c85244b693e2bb6f9053625d2e117284aa9d20b60e2ef91c3f73f7eeb9370de0e60268ad6df25dfda11c48c7f3a0efef4f867b5e5e71832449c1b20bca7664c67f909c6d79c3314", 0xf0, 0x8}], 0x0, &(0x7f0000000200)={[{'#'}, {'&'}, {'&@[\x00'}, {'/dev/ppp\x00'}, {}, {'+['}, {'/dev/ppp\x00'}], [{@fowner_lt={'fowner<'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) fcntl$notify(r2, 0x402, 0x80000000) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x102, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={r5, @in6={{0xa, 0x4e20, 0xfffffffc, @private1={0xfc, 0x1, [], 0x1}, 0x3}}, 0x6c71, 0x3}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getnetconf={0x3c, 0x52, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7a}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7f}, @NETCONFA_FORWARDING={0x8, 0x2, 0x5}, @NETCONFA_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008091}, 0x1) [ 1981.424145] FAULT_INJECTION: forcing a failure. [ 1981.424145] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.451237] CPU: 1 PID: 31988 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1981.459145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.468492] Call Trace: [ 1981.471080] dump_stack+0x1b2/0x283 [ 1981.474726] should_fail.cold+0x10a/0x154 [ 1981.478877] should_failslab+0xd6/0x130 [ 1981.482832] kmem_cache_alloc+0x28e/0x3c0 [ 1981.486960] ? shmem_destroy_callback+0xa0/0xa0 [ 1981.491610] shmem_alloc_inode+0x18/0x40 [ 1981.495646] ? shmem_destroy_callback+0xa0/0xa0 [ 1981.500292] alloc_inode+0x5d/0x170 [ 1981.503897] new_inode+0x1d/0xf0 [ 1981.507244] shmem_get_inode+0x8b/0x890 [ 1981.511199] __shmem_file_setup.part.0+0x104/0x3c0 [ 1981.516106] ? shmem_create+0x30/0x30 [ 1981.519881] ? __alloc_fd+0x1be/0x490 [ 1981.523661] SyS_memfd_create+0x1fc/0x3c0 [ 1981.527788] ? shmem_fcntl+0x120/0x120 [ 1981.531657] ? __do_page_fault+0x159/0xad0 [ 1981.535871] ? do_syscall_64+0x4c/0x640 [ 1981.539834] ? shmem_fcntl+0x120/0x120 [ 1981.543710] do_syscall_64+0x1d5/0x640 [ 1981.547583] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1981.552750] RIP: 0033:0x45e219 [ 1981.555933] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1981.563631] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 000000000045e219 [ 1981.570890] RDX: 00007f26df403ad0 RSI: 0000000000000000 RDI: 00000000004c2c87 [ 1981.578138] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1981.585386] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1981.592651] R13: 0000000020000240 R14: 0000000020000500 R15: 0000000020000640 05:04:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r2, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}]}, 0x1c}}, 0x0) 05:04:51 executing program 0 (fault-call:0 fault-nth:3): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:04:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1f8, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xcb}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5cab}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x4}]}, 0x1f8}}, 0x0) [ 1981.636189] gfs2: gfs2 mount does not exist [ 1981.640472] cramfs: wrong magic 05:04:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r3 = dup3(0xffffffffffffffff, r0, 0x80000) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f00000001c0)=0x44) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x400, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x600002, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r1, &(0x7f0000000040)={0x4000}) [ 1981.698785] cramfs: wrong magic [ 1981.713552] FAULT_INJECTION: forcing a failure. [ 1981.713552] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.727132] CPU: 1 PID: 32017 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1981.735030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.744382] Call Trace: [ 1981.746973] dump_stack+0x1b2/0x283 [ 1981.750607] should_fail.cold+0x10a/0x154 [ 1981.754759] should_failslab+0xd6/0x130 [ 1981.758759] kmem_cache_alloc+0x28e/0x3c0 [ 1981.762914] get_empty_filp+0x86/0x3e0 [ 1981.766811] alloc_file+0x23/0x440 [ 1981.770355] __shmem_file_setup.part.0+0x198/0x3c0 [ 1981.775300] ? shmem_create+0x30/0x30 [ 1981.779100] ? __alloc_fd+0x1be/0x490 [ 1981.782905] SyS_memfd_create+0x1fc/0x3c0 [ 1981.787053] ? shmem_fcntl+0x120/0x120 [ 1981.790948] ? __do_page_fault+0x159/0xad0 [ 1981.795184] ? do_syscall_64+0x4c/0x640 [ 1981.799151] ? shmem_fcntl+0x120/0x120 [ 1981.803038] do_syscall_64+0x1d5/0x640 [ 1981.806933] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1981.812113] RIP: 0033:0x45e219 [ 1981.815283] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1981.822976] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 000000000045e219 [ 1981.830228] RDX: 00007f26df403ad0 RSI: 0000000000000000 RDI: 00000000004c2c87 [ 1981.837474] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 05:04:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x154, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x154}}, 0x0) [ 1981.844723] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1981.851998] R13: 0000000020000240 R14: 0000000020000500 R15: 0000000020000640 05:04:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5f47d7b5, 0x0, 0x200, 0x5, 0x4, "b100f48bb827809e63314a867298795468f4cf", 0x80000001, 0x6}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:04:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x28000, 0x0) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r5 = socket(0x25, 0x5, 0x0) connect$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 1981.970808] audit: type=1804 audit(1609823091.608:8814): pid=32045 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1700/bus" dev="sda1" ino=16146 res=1 05:04:51 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0xeb, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 1982.132312] audit: type=1804 audit(1609823091.768:8815): pid=32050 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1700/bus" dev="sda1" ino=16146 res=1 [ 1982.161890] cramfs: wrong magic [ 1982.206742] cramfs: wrong magic 05:04:52 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x154, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x154}}, 0x0) 05:04:52 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:52 executing program 0 (fault-call:0 fault-nth:4): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:04:52 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000680)="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", 0x1000, 0xffffffffffffffe1}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e8d95bd9bccb88612685c25589b49055767b640e47a4ce1a9c97dbcc95bff4862c4f64c382927658de4b9783d6f1358f6e353bd8686044c7395adef4061089835b45c81fa22754f5c024ca663bf718a04dc0a1b6158f3c444806fd091e0b1dc6a88d33968562b26de367bc176516763972db26bad7be24beb9e21e817d4ed29e8a982e33939d8e12414346f63bc251067050f2fcded4b16cd2b9ee0183d4cff27e4564be4990323fa8adaa6983c94343d431886c61618568814329a1c9a2b7"]) 05:04:52 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xdd}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40000) setsockopt$inet_tcp_int(r1, 0x6, 0x21, &(0x7f0000000140)=0x6, 0x4) [ 1982.660839] FAULT_INJECTION: forcing a failure. [ 1982.660839] name failslab, interval 1, probability 0, space 0, times 0 [ 1982.680834] CPU: 0 PID: 32080 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1982.688761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.698106] Call Trace: [ 1982.700688] dump_stack+0x1b2/0x283 [ 1982.704313] should_fail.cold+0x10a/0x154 [ 1982.708463] should_failslab+0xd6/0x130 [ 1982.712439] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1982.717112] apparmor_file_alloc_security+0x129/0x800 [ 1982.722304] security_file_alloc+0x66/0xa0 [ 1982.726535] ? selinux_is_enabled+0x5/0x50 [ 1982.730780] get_empty_filp+0x15c/0x3e0 [ 1982.734748] alloc_file+0x23/0x440 [ 1982.738546] __shmem_file_setup.part.0+0x198/0x3c0 [ 1982.743473] ? shmem_create+0x30/0x30 [ 1982.747277] ? __alloc_fd+0x1be/0x490 [ 1982.750012] cramfs: wrong magic [ 1982.751083] SyS_memfd_create+0x1fc/0x3c0 [ 1982.751095] ? shmem_fcntl+0x120/0x120 [ 1982.751104] ? __do_page_fault+0x159/0xad0 [ 1982.751115] ? do_syscall_64+0x4c/0x640 [ 1982.770534] ? shmem_fcntl+0x120/0x120 [ 1982.774397] do_syscall_64+0x1d5/0x640 [ 1982.778273] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1982.783439] RIP: 0033:0x45e219 [ 1982.786607] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1982.794380] RAX: ffffffffffffffda RBX: 0000000020000500 RCX: 000000000045e219 [ 1982.801631] RDX: 00007f26df403ad0 RSI: 0000000000000000 RDI: 00000000004c2c87 05:04:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14c, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_MON={0x4}]}, 0x14c}}, 0x0) 05:04:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2001010}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xb0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x89e8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4e}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}]}, @NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb85}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xda}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000000c0)={0x1, 0xbb}, 0x2) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0800000051f700006068ac9b549ac80fc9babc681affcce233887a113963e0d9081c8caf002e6b92619758c5658804b93493f46534d4fb43d5426b39593ec66c2bea4d1b778f7a2c10112ca36b0b9f14f716f3f7f8945209782cd0d8077c"], &(0x7f0000000080), 0x1000) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:52 executing program 0 (fault-call:0 fault-nth:5): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 1982.808881] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1982.816133] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1982.823576] R13: 0000000020000240 R14: 0000000020000500 R15: 0000000020000640 05:04:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14c, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_MON={0x4}]}, 0x14c}}, 0x0) [ 1982.891612] cramfs: wrong magic 05:04:52 executing program 5: connect$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f8e2e371436e7cf7f8ba785b0e46633af6524d12b3fcea3701c02e651e483aeea034c2989ef31453b6119226619b72c76eb0092f4e2e626ca9d9623ec69f0777a85951c97727b3e61cccdbeaa5a6d4e99a145f800f83c3ecc423f176ec1f85a4ab876f6aecf394b2814335fd744edac8c54aa1ee59ddff8fad745d43614dc45dbf0b77c2b6a0c8329322ffd4fcf20b1f5fcfb9997fa829e97e66a6c6369aac48c67e5c7aa5f212b1a452a553b9290adb965ba0b897f143827a3da1a647d3de1fd8627d998e579f47064602d07c7a02780f9f3e2169f3a2acce12986a5d6ce3b66aaaf53ca47b41696ca"]) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000100)={0x1ff}) [ 1982.924560] FAULT_INJECTION: forcing a failure. [ 1982.924560] name failslab, interval 1, probability 0, space 0, times 0 [ 1982.964617] audit: type=1804 audit(1609823092.598:8816): pid=32117 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1701/bus" dev="sda1" ino=16769 res=1 [ 1983.050190] CPU: 0 PID: 32113 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1983.058102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.067450] Call Trace: [ 1983.070035] dump_stack+0x1b2/0x283 [ 1983.073662] should_fail.cold+0x10a/0x154 [ 1983.077811] should_failslab+0xd6/0x130 [ 1983.081779] kmem_cache_alloc+0x28e/0x3c0 [ 1983.085925] getname_flags+0xc8/0x550 [ 1983.089721] do_sys_open+0x1ce/0x410 [ 1983.093431] ? filp_open+0x60/0x60 [ 1983.096965] ? fput+0xb/0x140 [ 1983.100061] ? do_syscall_64+0x4c/0x640 [ 1983.104029] ? do_sys_open+0x410/0x410 [ 1983.107910] do_syscall_64+0x1d5/0x640 [ 1983.111812] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1983.117007] RIP: 0033:0x417d11 [ 1983.120195] RSP: 002b:00007f26df403a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1983.127904] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417d11 [ 1983.135165] RDX: 00007f26df403ad0 RSI: 0000000000000002 RDI: 00007f26df403ad0 [ 1983.142427] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 05:04:52 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf250600000008000300010000000800020001001c00280001801400040020010000000000000000000000000002060005004e210000050002000000000015637ad2088d864f192588ad877d589763cd69c8b21db626c35a347bf838870a14079319425440979f9a9b621469526919bdf362578987c49575e0cffa0190e7aecb440a7d0cff6add5603638413ef3a76"], 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x40081) [ 1983.149687] R10: 00007f26df403acc R11: 0000000000000293 R12: 0000000000000000 [ 1983.156944] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000510 [ 1983.238089] audit: type=1804 audit(1609823092.868:8817): pid=32123 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1701/bus" dev="sda1" ino=16769 res=1 [ 1983.273383] cramfs: wrong magic 05:04:53 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14c, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e4c}]}, @TIPC_NLA_MON={0x4}]}, 0x14c}}, 0x0) 05:04:53 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000040)={[{'rootcontext'}, {'rootcontext'}, {}, {}], [{@subj_user={'subj_user'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 05:04:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="feff171e", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:04:53 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x1fef7) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:04:53 executing program 0 (fault-call:0 fault-nth:6): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 1983.594575] FAULT_INJECTION: forcing a failure. [ 1983.594575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1983.606408] CPU: 0 PID: 32153 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1983.614284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.623628] Call Trace: [ 1983.626213] dump_stack+0x1b2/0x283 [ 1983.629825] should_fail.cold+0x10a/0x154 [ 1983.634039] ? __lock_acquire+0x5fc/0x3f20 [ 1983.638340] __alloc_pages_nodemask+0x22c/0x2720 [ 1983.643072] ? static_obj+0x50/0x50 [ 1983.646679] ? __lock_acquire+0x5fc/0x3f20 [ 1983.650940] ? perf_trace_lock+0xf7/0x490 [ 1983.655070] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1983.659903] ? check_preemption_disabled+0x35/0x240 [ 1983.664899] ? perf_trace_lock+0xf7/0x490 [ 1983.669032] ? perf_trace_lock_acquire+0x510/0x510 [ 1983.673959] ? perf_trace_lock_acquire+0x510/0x510 [ 1983.678881] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1983.685524] cache_grow_begin+0x8f/0x420 [ 1983.689566] cache_alloc_refill+0x273/0x350 [ 1983.693866] kmem_cache_alloc+0x333/0x3c0 [ 1983.698010] getname_flags+0xc8/0x550 [ 1983.701791] do_sys_open+0x1ce/0x410 [ 1983.705497] ? filp_open+0x60/0x60 [ 1983.709015] ? fput+0xb/0x140 [ 1983.712097] ? do_syscall_64+0x4c/0x640 [ 1983.716047] ? do_sys_open+0x410/0x410 [ 1983.719911] do_syscall_64+0x1d5/0x640 [ 1983.723782] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1983.728962] RIP: 0033:0x417d11 [ 1983.732142] RSP: 002b:00007f26df403a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 05:04:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x140, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x140}}, 0x0) 05:04:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x100) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x3}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) statx(r4, &(0x7f00000001c0)='./file0\x00', 0x7200, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x200, 0x4, &(0x7f0000000440)=[{&(0x7f00000002c0)="405a637cff9e9e50cb8df28a066de7baa800d91ab718fa14d70808701b0344bd86852b4b4a16f708168235dd24f4e57898542a7b0938eb9b9bec0f5957c763b3f9191b038803938a81d2a8fd14b4984c47ac710bca95a4ae61edf817f1880bcc4119dab6f342f620de0473be2a6faebc6f8ec548a73935cadceb", 0x7a, 0x1}, {&(0x7f00000003c0)="9bfc666ef33de2cdfb5f487fe788706adcde729245f351f1488ac9315fd8982e1fd62b51a66d36173c598db3a8010e9cf266d831cf26a8989bbbde610bb57771ff742cfb35b2e38e92ccdd607d065b7a815e0e72cb", 0x55, 0x4}, {&(0x7f0000000540)="168e6031f6bd1ce72df1aaadc5fbb9119514836848b9bea000b3bfef34e08a3b4c3a50daaf8f0c1cc6cb7be36b2d8a286da4bb3a5f9cca4ba2bde970d74b4a71536d9d2a9810d28f043b3ed12cc149df42657639fef176f37d8944d07d13330c197e7b8069192c0013c446369098225e3636266a72c8a7ed8409758c169a601e42cac70874805d1c25b8025ee8b34b67e62fee059c10aefa29f6e6e3323873d41e961a3beb637a396bec52ff8d246339f25daba2a6de6f22cf5cea7d2295285749a145d885dbaa55c5ce6e632bab6ba23a7c65472e", 0xd5, 0x3}, {&(0x7f0000000640)="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", 0xfb, 0x4}], 0xa01000, &(0x7f0000000840)={[{@usrquota='usrquota'}, {@sysvgroups='sysvgroups'}, {@lazytime='lazytime'}, {@sysvgroups='sysvgroups'}, {@lazytime='lazytime'}, {@nodiscard='nodiscard'}, {@swidth={'swidth', 0x3d, 0x5}}, {@rtdev={'rtdev', 0x3d, './file0'}}], [{@smackfstransmute={'smackfstransmute'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '&:'}}, {@pcr={'pcr', 0x3d, 0x40}}, {@euid_lt={'euid<', r5}}, {@hash='hash'}]}) [ 1983.739840] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417d11 [ 1983.747082] RDX: 00007f26df403ad0 RSI: 0000000000000002 RDI: 00007f26df403ad0 [ 1983.754326] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1983.761589] R10: 00007f26df403acc R11: 0000000000000293 R12: 0000000000000000 [ 1983.768836] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000510 05:04:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x138, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x4}]}, 0x138}}, 0x0) [ 1983.830743] cramfs: wrong magic [ 1983.876574] cramfs: wrong magic 05:04:53 executing program 5: r0 = syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) mkdirat(r0, &(0x7f0000000000)='./bus\x00', 0x8) 05:04:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x138, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x4}]}, 0x138}}, 0x0) [ 1983.901183] audit: type=1804 audit(1609823093.538:8818): pid=32188 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1702/bus" dev="sda1" ino=16947 res=1 05:04:53 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x1) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x29c, 0x4) [ 1984.016861] cramfs: wrong magic [ 1984.144487] cramfs: wrong magic [ 1984.235985] cramfs: wrong magic [ 1984.274969] audit: type=1804 audit(1609823093.908:8819): pid=32229 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1702/bus" dev="sda1" ino=16947 res=1 05:04:54 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x138, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x4}]}, 0x138}}, 0x0) 05:04:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="fb99dbd1", @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:04:54 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x232d3b9fa6e7d24c, 0x0) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:04:54 executing program 0 (fault-call:0 fault-nth:7): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:04:54 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x4}, 0x8) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:04:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x114, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x114}}, 0x0) 05:04:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0xfd04) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000a3f437d26ff8cc15b70862b635d2834d841684bba4d3a40e9c36ccba3a518509f6c4ee2d87fb3bc68b4c4df69c4b2483f31d8ea468c9c44ececbf7161654fca00997a97f8718fc6caac9b6c38f30c1885be68b3a4d0f89d901318fccb86866bcbf94e175090c113256223f99a604d52102048ed3167b896040d62a3b2665062e167696bd9e8f764f9c3e0b23f2242b5465f6ae4f8c25e28a883c8d290dbc59aecb40e618ed09017085baf11f8cb1eb88dadfdbd994385308872a78a525ad36a4f49448991247111f94d67a24577619f1e127a2c45944bd38a64158fff1633d6eff6b057570d10023a6c1d3130111", @ANYRES16, @ANYBLOB="110700000000000000000900000008000300", @ANYRES64=r2, @ANYBLOB], 0x1c}}, 0x0) [ 1984.525453] cramfs: wrong magic [ 1984.531403] FAULT_INJECTION: forcing a failure. [ 1984.531403] name failslab, interval 1, probability 0, space 0, times 0 05:04:54 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="74c50d6e1d520e000000"]) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) 05:04:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$FIOCLEX(r1, 0x5451) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000000)={0x0, 0x1f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') openat$cgroup_ro(r4, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="5d0b5903", @ANYRES16=r5, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:04:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10c, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_MON={0x4}]}, 0x10c}}, 0x0) [ 1984.565917] CPU: 1 PID: 32254 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1984.573820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.583166] Call Trace: [ 1984.585750] dump_stack+0x1b2/0x283 [ 1984.589387] should_fail.cold+0x10a/0x154 [ 1984.593552] should_failslab+0xd6/0x130 [ 1984.597526] kmem_cache_alloc+0x28e/0x3c0 [ 1984.601665] get_empty_filp+0x86/0x3e0 [ 1984.605531] path_openat+0x84/0x2970 [ 1984.609371] ? check_preemption_disabled+0x35/0x240 [ 1984.614369] ? perf_trace_lock+0xf7/0x490 [ 1984.618510] ? path_lookupat+0x780/0x780 [ 1984.622553] ? perf_trace_lock+0xf7/0x490 [ 1984.626684] do_filp_open+0x179/0x3c0 [ 1984.630458] ? may_open_dev+0xe0/0xe0 [ 1984.634251] ? __alloc_fd+0x1be/0x490 [ 1984.638027] ? lock_downgrade+0x740/0x740 [ 1984.642165] ? do_raw_spin_unlock+0x164/0x220 [ 1984.646657] ? _raw_spin_unlock+0x29/0x40 [ 1984.650793] ? __alloc_fd+0x1be/0x490 [ 1984.654591] do_sys_open+0x296/0x410 [ 1984.658296] ? filp_open+0x60/0x60 [ 1984.661830] ? fput+0xb/0x140 [ 1984.664931] ? do_syscall_64+0x4c/0x640 [ 1984.668899] ? do_sys_open+0x410/0x410 [ 1984.672779] do_syscall_64+0x1d5/0x640 [ 1984.676664] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1984.681842] RIP: 0033:0x417d11 [ 1984.685027] RSP: 002b:00007f26df403a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1984.692736] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417d11 [ 1984.699995] RDX: 00007f26df403ad0 RSI: 0000000000000002 RDI: 00007f26df403ad0 [ 1984.703173] audit: type=1804 audit(1609823094.198:8820): pid=32267 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1703/bus" dev="sda1" ino=15813 res=1 [ 1984.707268] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1984.707274] R10: 00007f26df403acc R11: 0000000000000293 R12: 0000000000000000 [ 1984.707279] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000510 05:04:54 executing program 0 (fault-call:0 fault-nth:8): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 1984.964080] audit: type=1804 audit(1609823094.498:8821): pid=32276 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1703/bus" dev="sda1" ino=15813 res=1 [ 1985.129564] cramfs: wrong magic [ 1985.133678] FAULT_INJECTION: forcing a failure. [ 1985.133678] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.176273] cramfs: wrong magic [ 1985.185633] CPU: 0 PID: 32287 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1985.193529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.202890] Call Trace: [ 1985.205475] dump_stack+0x1b2/0x283 [ 1985.209122] should_fail.cold+0x10a/0x154 [ 1985.213272] should_failslab+0xd6/0x130 [ 1985.217248] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1985.221926] apparmor_file_alloc_security+0x129/0x800 [ 1985.227134] security_file_alloc+0x66/0xa0 [ 1985.231371] ? selinux_is_enabled+0x5/0x50 [ 1985.235606] get_empty_filp+0x15c/0x3e0 [ 1985.239581] path_openat+0x84/0x2970 [ 1985.243290] ? check_preemption_disabled+0x35/0x240 [ 1985.248301] ? perf_trace_lock+0xf7/0x490 [ 1985.252443] ? path_lookupat+0x780/0x780 [ 1985.256501] ? perf_trace_lock+0xf7/0x490 [ 1985.260662] do_filp_open+0x179/0x3c0 [ 1985.264453] ? may_open_dev+0xe0/0xe0 [ 1985.268256] ? __alloc_fd+0x1be/0x490 [ 1985.272051] ? lock_downgrade+0x740/0x740 [ 1985.276194] ? do_raw_spin_unlock+0x164/0x220 [ 1985.280685] ? _raw_spin_unlock+0x29/0x40 [ 1985.284826] ? __alloc_fd+0x1be/0x490 [ 1985.288625] do_sys_open+0x296/0x410 [ 1985.292325] ? filp_open+0x60/0x60 [ 1985.295853] ? fput+0xb/0x140 [ 1985.298940] ? do_syscall_64+0x4c/0x640 [ 1985.302939] ? do_sys_open+0x410/0x410 [ 1985.306833] do_syscall_64+0x1d5/0x640 [ 1985.310711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1985.315894] RIP: 0033:0x417d11 [ 1985.319062] RSP: 002b:00007f26df403a10 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 05:04:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10c, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_MON={0x4}]}, 0x10c}}, 0x0) 05:04:55 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:04:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000040)=0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:55 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x7, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) [ 1985.326770] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417d11 [ 1985.334205] RDX: 00007f26df403ad0 RSI: 0000000000000002 RDI: 00007f26df403ad0 [ 1985.341449] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1985.348705] R10: 00007f26df403acc R11: 0000000000000293 R12: 0000000000000000 [ 1985.355992] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000510 05:04:55 executing program 0 (fault-call:0 fault-nth:9): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:04:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) 05:04:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x10c, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}, @TIPC_NLA_MON={0x4}]}, 0x10c}}, 0x0) [ 1985.469636] cramfs: wrong magic [ 1985.474574] FAULT_INJECTION: forcing a failure. [ 1985.474574] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.496305] CPU: 0 PID: 32311 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1985.504200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.513657] Call Trace: [ 1985.516246] dump_stack+0x1b2/0x283 [ 1985.519877] should_fail.cold+0x10a/0x154 [ 1985.524022] should_failslab+0xd6/0x130 [ 1985.528005] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1985.532676] ? loop_get_status64+0x100/0x100 [ 1985.537083] __kthread_create_on_node+0xbe/0x3a0 [ 1985.541836] ? kthread_park+0x130/0x130 [ 1985.545820] ? __fget+0x1fe/0x360 [ 1985.549286] ? loop_get_status64+0x100/0x100 [ 1985.553712] kthread_create_on_node+0xa8/0xd0 [ 1985.558204] ? __kthread_create_on_node+0x3a0/0x3a0 [ 1985.563240] ? __lockdep_init_map+0x100/0x560 [ 1985.567733] ? __lockdep_init_map+0x100/0x560 [ 1985.572230] lo_ioctl+0xcd9/0x1cd0 [ 1985.575771] ? loop_set_status64+0xe0/0xe0 [ 1985.580006] blkdev_ioctl+0x540/0x1830 [ 1985.583906] ? blkpg_ioctl+0x8d0/0x8d0 [ 1985.587799] ? check_preemption_disabled+0x35/0x240 [ 1985.592819] ? perf_trace_lock+0xf7/0x490 [ 1985.596960] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1985.602057] ? perf_trace_lock_acquire+0x510/0x510 [ 1985.606985] block_ioctl+0xd9/0x120 [ 1985.610610] ? blkdev_fallocate+0x3a0/0x3a0 [ 1985.614937] do_vfs_ioctl+0x75a/0xff0 [ 1985.618745] ? ioctl_preallocate+0x1a0/0x1a0 [ 1985.623150] ? lock_downgrade+0x740/0x740 [ 1985.627299] ? __fget+0x225/0x360 [ 1985.630753] ? do_vfs_ioctl+0xff0/0xff0 [ 1985.634753] ? security_file_ioctl+0x83/0xb0 [ 1985.639176] SyS_ioctl+0x7f/0xb0 [ 1985.642535] ? do_vfs_ioctl+0xff0/0xff0 [ 1985.646505] do_syscall_64+0x1d5/0x640 [ 1985.650399] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1985.655608] RIP: 0033:0x45e087 [ 1985.658793] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:04:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xfc, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0xfc}}, 0x0) 05:04:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0321f0170600c100000000c20c0535812cd15cd2a4cb0d33891c4cec87eb3f0a9ccad812d96c14fab8ff8f7c7bec30b934b2c1babed004786094c0c0fc476c1be6883cc1051359de274774cd462f71b696c75304bd2f910b6bd5440bc02547c7f60656ec436cd9a754564b17b6b53c47673c3346d9d030e2ab9f5187181305f195790c673dd52352a5941d4866b2d1e09353eafc10ed7bd99d3d104b49b4a0b9394e5e79fece9ab6de4c0298db6b19070c233565bb39be46937f5e2004ac84758c7dbe7927ce32798eb96363d5ff7fcb3f58", @ANYRES16=r4, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x18243) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:04:55 executing program 0 (fault-call:0 fault-nth:10): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 1985.666507] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e087 [ 1985.673767] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1985.681031] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1985.688332] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1985.695594] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000510 05:04:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xf4, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MON={0x4}]}, 0xf4}}, 0x0) [ 1985.763078] cramfs: wrong magic [ 1985.775375] FAULT_INJECTION: forcing a failure. [ 1985.775375] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.827723] audit: type=1804 audit(1609823095.459:8822): pid=32360 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1704/bus" dev="sda1" ino=17026 res=1 [ 1985.858482] CPU: 0 PID: 32345 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1985.866379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.875847] Call Trace: [ 1985.878428] dump_stack+0x1b2/0x283 [ 1985.882061] should_fail.cold+0x10a/0x154 [ 1985.886213] should_failslab+0xd6/0x130 [ 1985.890311] kmem_cache_alloc+0x28e/0x3c0 [ 1985.894468] __kernfs_new_node+0x6f/0x470 [ 1985.898632] kernfs_create_dir_ns+0x8c/0x200 [ 1985.903032] internal_create_group+0xe9/0x710 [ 1985.907520] lo_ioctl+0x1137/0x1cd0 [ 1985.911142] ? loop_set_status64+0xe0/0xe0 [ 1985.915371] blkdev_ioctl+0x540/0x1830 [ 1985.919249] ? blkpg_ioctl+0x8d0/0x8d0 [ 1985.923125] ? check_preemption_disabled+0x35/0x240 [ 1985.928134] ? perf_trace_lock+0xf7/0x490 [ 1985.932273] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1985.937377] ? perf_trace_lock_acquire+0x510/0x510 [ 1985.942323] block_ioctl+0xd9/0x120 [ 1985.945965] ? blkdev_fallocate+0x3a0/0x3a0 [ 1985.950281] do_vfs_ioctl+0x75a/0xff0 [ 1985.954090] ? ioctl_preallocate+0x1a0/0x1a0 [ 1985.958495] ? lock_downgrade+0x740/0x740 [ 1985.962641] ? __fget+0x225/0x360 [ 1985.966086] ? do_vfs_ioctl+0xff0/0xff0 [ 1985.970054] ? security_file_ioctl+0x83/0xb0 [ 1985.974458] SyS_ioctl+0x7f/0xb0 [ 1985.977812] ? do_vfs_ioctl+0xff0/0xff0 [ 1985.981789] do_syscall_64+0x1d5/0x640 [ 1985.985676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1985.990859] RIP: 0033:0x45e087 [ 1985.994037] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1986.001740] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e087 [ 1986.009003] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1986.016284] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1986.023545] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1986.030805] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000510 [ 1986.141342] audit: type=1804 audit(1609823095.749:8823): pid=32364 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1704/bus" dev="sda1" ino=17026 res=1 05:04:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x41c1, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x101000, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0xfd04) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x5, 0x2) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x40) fchdir(r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000100)=ANY=[], 0x1c) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r6, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1986.277910] cramfs: wrong magic 05:04:55 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x2e, 0x27, 0x14, 0x3, 0x3, 0x10000, 0x2, 0xa7, 0xffffffffffffffff}) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:04:55 executing program 5: r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x7, 0x5]}, &(0x7f0000000040)=0x8) 05:04:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xf4, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MON={0x4}]}, 0xf4}}, 0x0) 05:04:56 executing program 0 (fault-call:0 fault-nth:11): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:04:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xf4, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MON={0x4}]}, 0xf4}}, 0x0) 05:04:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)=0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1986.385567] FAULT_INJECTION: forcing a failure. [ 1986.385567] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.397038] CPU: 1 PID: 32390 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1986.404920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.414261] Call Trace: [ 1986.414276] dump_stack+0x1b2/0x283 [ 1986.414291] should_fail.cold+0x10a/0x154 [ 1986.414311] should_failslab+0xd6/0x130 [ 1986.428621] kmem_cache_alloc+0x28e/0x3c0 05:04:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xd8, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0xd8}}, 0x0) [ 1986.432765] __kernfs_new_node+0x6f/0x470 [ 1986.436907] kernfs_new_node+0x7b/0xe0 [ 1986.440788] __kernfs_create_file+0x3d/0x320 [ 1986.445190] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1986.449865] ? kernfs_create_dir_ns+0x171/0x200 [ 1986.454551] internal_create_group+0x22b/0x710 [ 1986.459136] lo_ioctl+0x1137/0x1cd0 [ 1986.462764] ? loop_set_status64+0xe0/0xe0 [ 1986.467000] blkdev_ioctl+0x540/0x1830 [ 1986.470884] ? blkpg_ioctl+0x8d0/0x8d0 [ 1986.474785] ? check_preemption_disabled+0x35/0x240 [ 1986.479802] ? perf_trace_lock+0xf7/0x490 [ 1986.483946] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1986.489046] ? perf_trace_lock_acquire+0x510/0x510 [ 1986.493996] block_ioctl+0xd9/0x120 [ 1986.497613] ? blkdev_fallocate+0x3a0/0x3a0 [ 1986.501914] do_vfs_ioctl+0x75a/0xff0 [ 1986.505695] ? ioctl_preallocate+0x1a0/0x1a0 [ 1986.510126] ? lock_downgrade+0x740/0x740 [ 1986.514259] ? __fget+0x225/0x360 [ 1986.517688] ? do_vfs_ioctl+0xff0/0xff0 [ 1986.521641] ? security_file_ioctl+0x83/0xb0 [ 1986.526040] SyS_ioctl+0x7f/0xb0 [ 1986.529379] ? do_vfs_ioctl+0xff0/0xff0 [ 1986.533327] do_syscall_64+0x1d5/0x640 [ 1986.537195] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1986.542359] RIP: 0033:0x45e087 [ 1986.545525] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1986.553212] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e087 [ 1986.560508] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1986.567757] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1986.575002] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1986.582250] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000510 05:04:56 executing program 5: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8100, 0x0) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 1986.606880] cramfs: wrong magic 05:04:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xd0, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x4}]}, 0xd0}}, 0x0) [ 1986.660906] audit: type=1804 audit(1609823096.299:8824): pid=32410 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1705/bus" dev="sda1" ino=17392 res=1 05:04:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x6d5720b842f424d4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000f632de7019ad9146063ddd18ef", @ANYRES16=r5, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) [ 1986.820964] audit: type=1804 audit(1609823096.459:8825): pid=32420 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1705/bus" dev="sda1" ino=17392 res=1 [ 1986.904524] cramfs: wrong magic 05:04:56 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:56 executing program 0 (fault-call:0 fault-nth:12): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:04:56 executing program 5: r0 = syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4='\x85\xba\xa1t\xf0\xcb\x11B'}}) 05:04:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xd0, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x4}]}, 0xd0}}, 0x0) 05:04:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x150, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_BEARER={0x130, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1f, @mcast2, 0x800}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2000, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2}}}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x40800) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = socket(0x25, 0x5, 0x0) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="30002595b71ec335cbf190debfbf99dba0f92cfcbd7286a8af9c2671f144a1e17b836481e20414a6044589744605455f6d082a40764dfe60c8881d41455f75f9fb903e75a357a23f92b3e01f81a74ccf9bef5d9803801dd931afe58895008baa576ce64041cb699104064f8129f9f14d77ab6dffee736d04e48c1600a013fd6aad6140b0bc8af037b9f82db6026e347de180f6551a6e2cf5b03934212da363050deb80b88dc65f7400e33045fb7e319bbd9f38f352f897c6fefc362990e0e55fa3b62f5e9b3e0126966611281a079e4418a5e153da29029f2019cc2422e1732ebd4a639d71e31c6d03d0a9", @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:04:56 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) fcntl$setpipe(r1, 0x407, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 1987.281742] FAULT_INJECTION: forcing a failure. [ 1987.281742] name failslab, interval 1, probability 0, space 0, times 0 [ 1987.293413] CPU: 0 PID: 32451 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1987.301300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1987.310639] Call Trace: [ 1987.313210] dump_stack+0x1b2/0x283 [ 1987.316817] should_fail.cold+0x10a/0x154 [ 1987.320952] should_failslab+0xd6/0x130 [ 1987.324906] kmem_cache_alloc+0x40/0x3c0 [ 1987.328949] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 1987.334552] idr_get_free_cmn+0x595/0x8d0 [ 1987.338691] ? check_preemption_disabled+0x35/0x240 [ 1987.343685] idr_alloc_cmn+0xe8/0x1e0 [ 1987.347464] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 1987.352283] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1987.357277] ? __schedule+0x1450/0x1de0 [ 1987.361234] ? fs_reclaim_release+0xd0/0x110 [ 1987.365710] idr_alloc_cyclic+0xc2/0x1d0 [ 1987.369750] ? idr_alloc_cmn+0x1e0/0x1e0 [ 1987.373803] ? __radix_tree_preload+0x1c3/0x250 [ 1987.378454] __kernfs_new_node+0xaf/0x470 [ 1987.382584] kernfs_create_dir_ns+0x8c/0x200 [ 1987.386971] internal_create_group+0xe9/0x710 [ 1987.391466] lo_ioctl+0x1137/0x1cd0 [ 1987.395078] ? loop_set_status64+0xe0/0xe0 [ 1987.399298] blkdev_ioctl+0x540/0x1830 [ 1987.403165] ? blkpg_ioctl+0x8d0/0x8d0 [ 1987.407032] ? check_preemption_disabled+0x35/0x240 [ 1987.412033] ? perf_trace_lock+0xf7/0x490 [ 1987.416165] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1987.421255] ? perf_trace_lock_acquire+0x510/0x510 [ 1987.426168] block_ioctl+0xd9/0x120 [ 1987.429777] ? blkdev_fallocate+0x3a0/0x3a0 [ 1987.434092] do_vfs_ioctl+0x75a/0xff0 [ 1987.437885] ? ioctl_preallocate+0x1a0/0x1a0 [ 1987.442287] ? lock_downgrade+0x740/0x740 [ 1987.446416] ? __fget+0x225/0x360 [ 1987.449848] ? do_vfs_ioctl+0xff0/0xff0 [ 1987.453799] ? security_file_ioctl+0x83/0xb0 [ 1987.458184] SyS_ioctl+0x7f/0xb0 [ 1987.461527] ? do_vfs_ioctl+0xff0/0xff0 [ 1987.465494] do_syscall_64+0x1d5/0x640 [ 1987.469360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1987.474525] RIP: 0033:0x45e087 05:04:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xd0, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff5af}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x4}]}, 0xd0}}, 0x0) [ 1987.477693] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1987.485377] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e087 [ 1987.492623] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1987.499875] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1987.507139] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1987.514410] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000510 05:04:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xa0, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0xa0}}, 0x0) [ 1987.542492] cramfs: wrong magic 05:04:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x404, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1000, 0x8002) 05:04:57 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) syz_mount_image$afs(&(0x7f0000000180)='afs\x00', &(0x7f00000001c0)='./bus\x00', 0xe24, 0x3, &(0x7f0000000340)=[{&(0x7f0000000200)="73bdd2fa14a883f4b508c3bc2bb40f045779276322a3929b9411", 0x1a, 0x4}, {&(0x7f0000000280)="79e7d5e95c104d6b0efb3d387e067fc84b442611057bcfef089f7e28e6f674825abdcaf3f14c7bfa436eac0905d7", 0x2e, 0x7}, {&(0x7f0000001680)="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", 0x1000, 0xc636}], 0x8400, &(0x7f00000003c0)={[{@flock_write='flock=write'}, {@autocell='autocell'}, {@source={'source', 0x3d, '\''}}, {@flock_write='flock=write'}, {@dyn='dyn'}], [{@euid_gt={'euid>', r0}}, {@subj_user={'subj_user', 0x3d, 'cramfs\x00'}}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@remote, r1}, 0x14) [ 1987.608497] cramfs: wrong magic 05:04:57 executing program 0 (fault-call:0 fault-nth:13): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 1987.637592] cramfs: wrong magic 05:04:57 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$CHAR_RAW_BSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000000)=0xfffffffffffff001) [ 1987.700538] audit: type=1804 audit(1609823097.339:8826): pid=32491 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1706/bus" dev="sda1" ino=15820 res=1 [ 1987.860559] audit: type=1804 audit(1609823097.489:8827): pid=32498 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1706/bus" dev="sda1" ino=15820 res=1 [ 1987.882756] cramfs: wrong magic [ 1987.886244] FAULT_INJECTION: forcing a failure. [ 1987.886244] name failslab, interval 1, probability 0, space 0, times 0 [ 1987.927866] CPU: 1 PID: 32493 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1987.935767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1987.945116] Call Trace: [ 1987.947716] dump_stack+0x1b2/0x283 [ 1987.951366] should_fail.cold+0x10a/0x154 [ 1987.955519] should_failslab+0xd6/0x130 [ 1987.959494] kmem_cache_alloc+0x28e/0x3c0 [ 1987.963669] __kernfs_new_node+0x6f/0x470 [ 1987.967820] kernfs_new_node+0x7b/0xe0 [ 1987.971710] __kernfs_create_file+0x3d/0x320 [ 1987.976121] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1987.980790] ? kernfs_create_dir_ns+0x171/0x200 [ 1987.985455] internal_create_group+0x22b/0x710 [ 1987.990035] lo_ioctl+0x1137/0x1cd0 [ 1987.993665] ? loop_set_status64+0xe0/0xe0 [ 1987.997901] blkdev_ioctl+0x540/0x1830 [ 1988.001781] ? blkpg_ioctl+0x8d0/0x8d0 [ 1988.005657] ? check_preemption_disabled+0x35/0x240 [ 1988.010669] ? perf_trace_lock+0xf7/0x490 [ 1988.014930] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1988.020007] ? perf_trace_lock_acquire+0x510/0x510 [ 1988.024920] block_ioctl+0xd9/0x120 [ 1988.028522] ? blkdev_fallocate+0x3a0/0x3a0 [ 1988.032817] do_vfs_ioctl+0x75a/0xff0 [ 1988.036593] ? ioctl_preallocate+0x1a0/0x1a0 [ 1988.040980] ? lock_downgrade+0x740/0x740 [ 1988.045104] ? __fget+0x225/0x360 [ 1988.048531] ? do_vfs_ioctl+0xff0/0xff0 [ 1988.052479] ? security_file_ioctl+0x83/0xb0 [ 1988.056860] SyS_ioctl+0x7f/0xb0 [ 1988.060197] ? do_vfs_ioctl+0xff0/0xff0 [ 1988.064147] do_syscall_64+0x1d5/0x640 [ 1988.068009] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1988.073174] RIP: 0033:0x45e087 [ 1988.076338] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1988.084017] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e087 [ 1988.091259] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1988.098502] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1988.105744] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1988.112985] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000510 05:04:57 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x98, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4}]}, 0x98}}, 0x0) 05:04:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x4) r1 = syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000640)) r2 = openat(r1, &(0x7f0000000000)='./bus\x00', 0x4a4000, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000e80)={{0x8, 0x5, 0x6, 0x9, '\x00', 0xfffffff8}, 0x0, [0x8, 0x5998, 0xe10b, 0x8, 0xff, 0x8, 0x2426, 0x3, 0x868, 0x7ff, 0x9, 0x3, 0x8, 0x80000001, 0x1000, 0x6, 0x1, 0x2, 0x8, 0x100000000, 0x8, 0x6, 0x5, 0x0, 0x0, 0x15, 0x9, 0x0, 0x3, 0x1, 0x8, 0x6, 0x1000, 0xde76, 0x1, 0x101, 0xfffffffffffffe01, 0xff, 0x2, 0x26, 0x9, 0xffffffffffff20b8, 0x3ff, 0x9, 0x6, 0xc7e, 0x0, 0x0, 0x6, 0x9, 0x1, 0x80000000, 0x8, 0x7, 0x40, 0xf73, 0x800, 0x5, 0x9, 0xfff, 0x6, 0x9, 0x1, 0xfff, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x9, 0x400, 0x82, 0x8, 0x7, 0x8, 0x3, 0x0, 0x5, 0x7fffffff, 0x8300, 0x400, 0x2, 0x7fff, 0xfffffffffffffff9, 0x3, 0x0, 0x1ff, 0x5, 0xc36c, 0x200000000000000, 0x8, 0x2, 0x10000, 0xffffffff, 0x6, 0x100, 0x8, 0x150b0, 0x928, 0x3, 0x3, 0x1000, 0x1a, 0x7, 0x2, 0x7, 0x74, 0x2, 0x3, 0x8000, 0x59, 0x7ff, 0x6, 0x8, 0x80000001, 0xff, 0x24c, 0x6, 0x7f, 0x1ff, 0x100000000, 0x1, 0x8, 0x9, 0x2, 0x200, 0x10, 0x400]}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000340)="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") [ 1988.166384] cramfs: wrong magic 05:04:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0xfd04) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0xfd04) dup3(r3, r4, 0x80000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r5, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:04:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x98, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4}]}, 0x98}}, 0x0) 05:04:57 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='\\-[\x00') close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '\\-[\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000820) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x242082, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000001c0)) 05:04:57 executing program 0 (fault-call:0 fault-nth:14): syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 1988.301574] cramfs: wrong magic 05:04:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x28) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x25, 0x5, 0x0) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'geneve0\x00', 0x1}, 0x18) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4c}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3ff}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8040) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="1601a44d2d8aad6e4f899b4ce952ac093cf0e076c6067bd750d2c6a8ab0646aadc73fef235c4168e8766103788e07fca7af012feb30811c8223ff82ff9a6a8baebd0f269f7ebde3b7cc5"], 0x1c}}, 0x0) 05:04:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x98, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x4}]}, 0x98}}, 0x0) [ 1988.323183] FAULT_INJECTION: forcing a failure. [ 1988.323183] name failslab, interval 1, probability 0, space 0, times 0 [ 1988.362478] cramfs: wrong magic [ 1988.368342] CPU: 0 PID: 32550 Comm: syz-executor.0 Not tainted 4.14.213-syzkaller #0 [ 1988.376237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1988.385693] Call Trace: [ 1988.388286] dump_stack+0x1b2/0x283 [ 1988.391917] should_fail.cold+0x10a/0x154 [ 1988.396070] should_failslab+0xd6/0x130 [ 1988.400045] kmem_cache_alloc+0x28e/0x3c0 [ 1988.404198] __kernfs_new_node+0x6f/0x470 [ 1988.408350] kernfs_new_node+0x7b/0xe0 [ 1988.412240] __kernfs_create_file+0x3d/0x320 [ 1988.416644] sysfs_add_file_mode_ns+0x1e1/0x450 [ 1988.421311] ? kernfs_create_dir_ns+0x171/0x200 [ 1988.425974] internal_create_group+0x22b/0x710 [ 1988.430548] lo_ioctl+0x1137/0x1cd0 [ 1988.434170] ? loop_set_status64+0xe0/0xe0 [ 1988.438416] blkdev_ioctl+0x540/0x1830 [ 1988.442295] ? blkpg_ioctl+0x8d0/0x8d0 [ 1988.446172] ? check_preemption_disabled+0x35/0x240 [ 1988.451185] ? perf_trace_lock+0xf7/0x490 [ 1988.455325] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1988.460425] ? perf_trace_lock_acquire+0x510/0x510 [ 1988.465348] block_ioctl+0xd9/0x120 [ 1988.468964] ? blkdev_fallocate+0x3a0/0x3a0 [ 1988.473278] do_vfs_ioctl+0x75a/0xff0 [ 1988.477079] ? ioctl_preallocate+0x1a0/0x1a0 [ 1988.481477] ? lock_downgrade+0x740/0x740 [ 1988.485626] ? __fget+0x225/0x360 [ 1988.489071] ? do_vfs_ioctl+0xff0/0xff0 [ 1988.493042] ? security_file_ioctl+0x83/0xb0 [ 1988.497441] SyS_ioctl+0x7f/0xb0 [ 1988.500798] ? do_vfs_ioctl+0xff0/0xff0 [ 1988.504881] do_syscall_64+0x1d5/0x640 [ 1988.508776] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1988.513956] RIP: 0033:0x45e087 [ 1988.517170] RSP: 002b:00007f26df403a18 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1988.524869] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e087 [ 1988.532132] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 1988.539396] RBP: 0000000000000000 R08: 00007f26df403ac8 R09: 0000000000000000 [ 1988.546660] R10: 00007f26df403acc R11: 0000000000000246 R12: 0000000000000000 [ 1988.553926] R13: 0000000000000004 R14: 0000000000000004 R15: 0000000020000510 [ 1988.561729] audit: type=1804 audit(1609823098.039:8828): pid=32567 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1707/bus" dev="sda1" ino=17406 res=1 05:04:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x6c}}, 0x0) 05:04:58 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)={[{'cramfs\x00'}, {'cramfs\x00'}, {'cramfs\x00'}, {'E@'}, {'cramfs\x00'}, {'\f\x00\x00\x00\x00'}, {'c\xc9H\xa6\xe0\x00\x00'}, {'cramfs\x00'}, {}, {'@('}]}) [ 1988.704195] audit: type=1804 audit(1609823098.289:8829): pid=32570 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1707/bus" dev="sda1" ino=17406 res=1 [ 1988.751384] cramfs: wrong magic [ 1988.799831] cramfs: wrong magic 05:04:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:58 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0xff, 0x3, 0x23, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, 0x700, 0x1, 0x6, 0x3}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="1107eaffffffffffffff0900020008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 05:04:58 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x222040, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0x100) r2 = signalfd(r0, &(0x7f00000000c0)={[0x401]}, 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00070000000000000000000000000000000100000000ac3f75243f35c8c1024313f8780805867446928dd9bd0c8cbe00fc1e945b8cda"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x20000000) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:04:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0x4}]}, 0x64}}, 0x0) 05:04:58 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x2, 0x6, &(0x7f0000000340)=[{&(0x7f0000000000)="5d47ccbfbd48b3a36eeb5d1a090327a74b6b24844909d67a03ba9a66c003d12ea238233b2535f3a6f002e9e21a5b6e7f1f92b8c50959d2b17f6f38fb70ef98f5466ecff10a0c4615a7cc5d24e28c9ed26e24458f43ab0428e33511bf8c40a2a273beae448b9d603e5a", 0x69, 0x3f}, {&(0x7f0000000080), 0x0, 0x100000000}, {&(0x7f00000000c0)="bbaf0831bb941149c332039c377232da2ccc6102e7c8cc8c066f69b49eca91a7f78b021b49963f7fd0d44d03b750439ecdcc6a6b3699469488b564854d43a8f7bcf6562682311480e0a7d97bc258784edfb7f3e76124c97120f0", 0x5a, 0x7fff}, {&(0x7f0000000140)="51993df9d10f0b5e6a592f069af275828ae76149e02e8d2f41e6607ac80fe33688556010004aa4bd7a8a5f9e7ac9fe48433815cac0e280b1843a0cd4ed5fdfa3fbbd77f22b459fa5801c42ba513d3cfb2a07e12bb6671bdf0e7bdd4ca94cda205491ff22f486e52c38197b2f0e69fc684f7d2db9", 0x74, 0x100000000}, {&(0x7f00000001c0)="bca4f9aafe745e49cc600f720d2e220b640a8cd8bfea67fe4caa352649c1add94b7202063de0c88b5de57b716928c5052d3b9e8e3005636acf", 0x39, 0x80000000}, {&(0x7f0000000680)="3c696088a4a33db31fb1f1057eedbb78725d6f9e029e0c6b5a672e5d2f53c44fb016a45005c72976adb9103d4f37b3bef0ed142792c49b8ca6791665c649f7cb13aab5329302ca0bad415283780161698d509fb50367a1fd5fce20cc7502b972e82cdef17959d364966d2c479392da1e35763b2dec1376900594462981a8e1dca97b0255dd4eb5efc2870ea9fb9c3625f9322d02ace32113fd1b1ae383197dfdf5f9e84a80ec8430f38f94c08372406b54fa253ce4870932b2eee93ad865b1a6f5d2adc4f9789f59629fb3c31cb042c0cca1f66999e393d5368975c7c989cb68dcbb7af70da323829ddb164caa90f3a6e08125d0998e95b6b72df1d960c1761cd393d59fd45475dc7662329c9c1c21468b0ed784cd34e6e9b7489526163e7afb1a14d12d4c4729a9cc99c1e797e11e657cb4b50e17104cfe125975f1970be6bbf0ac81257156f69e28deec483ff31559cefa7382bf997234bf4b0be42b6f8c6484d6e7de35d33cef01171e636b43cf24dd1ec62486010f37e9e3b0d43f50893144b8a84fadccba500cc8edbf78615fd4c30ba0cbc7fd3fb3636da26bd3df99ab76937027d4bbef7f7e564b217e758e0087dd5b322aae7ab472d9f00f88925676f3a95b363c2f2cc6ad3c4d88b5a163fae92de87785dcf850dd9cab87b17c8fe6bb8918e895de82385652cc301907c5c792e49ca6ae75be039119b963f6f76b14fa728147c41f73c1efd1a920e7cabddf6c51c08e80e60371214e20c8d659c01af1898335ce9a94f55bc576b8327b4907d4dafe382b99f25fcf165b6fc1e253206bba957e9975f5c8707b823bf7c546844a20b1e5904185422af81de387f9e051c22f831825fc4c91e5b0518ad2e6e8fec1f475ea7d413f97562f754eb62f937f3a826ecbebaf78bcf1fa21000bf30f791e59e03a14495861ca222eb308702d737f793e34ce9208edf5b6f11a6c354827fb1649738e75b84e4e9e23c12338e8772c66ced58bfd1310219e2183a163b18ced2fd6474ab3bf315bf466cf30967d0d75ec83c5c63bcbbad8ec46a624e8a18918e98cc5ccb6f28054713650499605bbc17b2e1c9333a5b29325d93dd63662bf0e20ae65cfce5226afd90c81869870b3b11915b9071f3f6610d4123d7819198cbce7f31c19616fca7fd18d3f41fde326c24fd20cdc4f1b903be66305ffb58934a2918a2e0d2e2badf56255e3fc6de11a1820bf8639061efca55d94baffa8406c5f9ab3504c0be604da7bd768c94de102129221c131a6ea0c3017170c30d5950f33f09186dc37ae8b1667ebb90bf1afff25a07e51910ae7803fb66b6ea71dc9fb6df2fcfdcd40c6c738009b1c8af899cdfde3f47e47cb64ba666d018e04f35cc695f28a54d69b35fdf4d27261d42a94f544967f84130503cbf948b3df308f6a411916b84bc305ef2f287a571a86bd93181c89106180bb3670d79f92b4c5d8978d981cad59cb0de7178c833462d02dad56696a56eb95fb950063fd61c123ea935ae099919b9500701d02bc5bc3b908ffd416d4d088fb9b9ac61d4c01a64607c5760b5ff580819b52aca9f54959fd6ac984a623d94f4e81f01b7e9f833cadba4c4e6bd8af406d3d773f4ac5256b13c0c332f6e3d082ebe10141ca503309e31354b6dd11cb4d5a2406ba228c87d8ee83f501c9c86e2afbd1001f0698a2e37e5176f920d7850f93174d12795d99f367876f8c2af10a21fa1ad2ac78898b6e0272f75bc172cd71bf8663bbe9dbbbb7be9772974804be76034f5827f715d37d54e3a4b34e25d193ce6c66cdee27fcbc4f5e03eabb574a86ddccf2e4e61995c450cfe48f2e66fc9fd6390a840ffb60b6edae4fc3f367f13956df1e09b5ad07d6c581b99b8640b1a19e542cf0f4c9cc9157a1f70846645f58d661bb480a496380ab5b9118bda3999c3fee1cef38549c4b3d4bc286f13a7c89b3264de6d283321f8f602ad8a45589a81da0a79ff48a2109d51e6dfe688192b65fada387135c039d842c4d7f19e9ffe9e45aac811357907507c7391705af1ea89c76b441a08592868d78b8989253f67b59277ef5815b7b9e50606c8e1ae05ebf15b113f26f0e17999ca8f4cf26de41572de01fac274ff254bbe4750aeee334ff18aa9294d301e7eb8d53a6a687d98a9aaeb1da6e8ee3cede6f03e2ca53cd76629eb6eca6845995a3da185970dcb75518c6a3932be481351fbdea9ce27223e4446a3bf370f2108a65a94974e4b67ebcc8d48cdc12dc270edb005a77fe3105c5c5a6a2202639a8a8fd21c2e2101fffaf225ec590e3c36264e93e3f73aea1ce041a58755ef48eca096223d4d85ba39e9347979b3eda6906e5024d3db69342fb401ea3b3a10a9c564c44f368784e97f91c28b7d0caa6446f20bca683016454e972fa857e21c9ce15fdd77dcc3d4477fb2f9f43ef225d37e9de8ff157fc5fbb6ba344fd4942fd95049829599daed867c920cbfc8cf05eb894792a5a5fdaeab2f7612c392f22eafd5b58d567109a521bb9308f231f64b5205ad9d66f8354706ff604866caed0e10730c64d30e5fd02a2d9dd0979ebc865031e4cfd2b49a48461e7d94f3399500bb56fef3792b4455e553f95a3cbcef7dd4cadc848fc1ce1bce875f4bf182cb3d328afa563bea50dc623029993310d6f0f4d3564f75b24ac9e6869858dee50aa77fc5826b4b822cea1149e6ddb5362fa6defef81f6107297ccc394d7ea27b5a4f38770ddab8306d83dd3f49cde73d0a496d469e8a3e5eb71bfb3f752f38a7218d5efa7efcb17379cbf07ee86b2e9a16e591e6a603a2340532f7ff384e3c691d5f4e169096eef1b2fa0b44514c0e5a4e83788b60e6e47c79b1659fa8080789f1403babb32fd56a7dff4d4b1e04587e5b135418dd0609da1279f013a61cc05d860043ab2e1674e281be7c366725dadeaa4523d83cf17ad9d7417e20198f2ba8dde37731ab7e8a61f18cb63a33f06305245775ba7c4ab1c08be3341893fad4e5e62cade3399559ca3c368967310a271f29b42b6f78e1466a06f61939a6437491eb3f368e3d93e10b5958955bd814c31827c8ef83278e39f550540c5f8e2d71647d2ec7e79542b4084574e4a7f5dac7703c8811b964bde06fb04094298b9428094f6dd3e7d660a66c8fc90be6319b0b81a55db3754912d0a8be53d8d0b09de274796fc2427cd840ffb9bf6cd123b1b7e046b3ffbc66c56aca6ae719bf464b87487af858ed4fa02d6c01633107622375043465872db77d881580c34de47ac65c4a9af7f4a3f644e2cdbe69e9b31d9a5bc283697ee1941d2bf4a87d75367ab6fa7f0e83956d6ac29b55b75dbe102cc947fabeb96cbed451248800acac2c4d07836523d42d2b47d2bbbb65adaed711962ccb2138224b80a09d8f113325f9af97c5042d4a3737d44befa63a2113a71a3de231184b711b5e10488b53af7702e0db4e5818e32fee8690b98e4b45a805a9cada60d251e9a46c25148214140c43f3e75d92bd6f130c0fa0a8313c1280cdc2beb4ff0a34413a375c22f126765f944f00801629152345d094950d92dfadcfae65d4022b585eca51ddef7a7c85e8ba5fd62d123f8f3afd872f05d84e3826538d3d888181d83ef7778e0ee4880ca2a6269acaa6918360062a68f101d17132364f995073202cdeaab7a878e800a65921f14a036921c1701f78831eeeeeb3c1c67279014902870ef6544f3f15172ced56183453493aea652feea9cb92874de7ca30a585de8877ed0a3141acce3565c144e3e1e3b2db64d3406205931f3d8d798d1f8a767f59411264294f15c6f7b8512d2635e6b0248f7d2c99e8724a0809d9baf353d072bf8e9d9c29485135718f5e4bf08ea0b08d80352349b5ef40b8ad8b3d4e1b068756d8de8bed560aaf37455c27114740903e40b28ece28577c59cbc227b90228a7df18a84ac41a89f5519f2f2bed2fda4130f34ff41d15d624ef512dde95274659aa4148afbb779eb628e261a1f7b546c7ff55b015681dea9ead83f2d441222c7ff444f8a9190b11bf65ba51f2c4221dd9d2f27f4b82f89832976d777cd3b93a5a2d118de6e4e34d89d608731811f9c17c415b644ea671bb307858344f899d3897aec2181cad76cf4c65c53262908ce010d67d2bd35f141f6b282f18deef3fb4671c5a46776d9dfa3b9ca2b3e43419f974f2eebe7d26b494dd14a5c87df67e309579914e517dbe6082e6b43626c286c8f446ecb9d57ee503c6d310667fd22d59c1f8afcbc5d3d7450073de973ad5132f33d18e00a2d7dd0c44d05afc6664f38868dbbf6c109f16a3ab2bd0ceb302f76a319aff073eeb7d98d53b09a4d8f6c780bc932a97ac192197fa48eba521c5f2b9f3c8bd5d584053a8cac8a9a03460acb450fc408ff7618b0f1104fd2831e4c1385595279ad93dbe08a48f037a00589834393231bcd129626304c88027d74300cb69d9580f0515eacb8bc1fc5bf0459a8b43547052dbccb556334d1afe6ada5433ca2b1ec842859e7890cd97fb71fbf100104da527d38bd80c100181411a28e2a8d6388c79cefa8c7ce8ff5e79366d4552fbfc01d512bc65d9bc09f20be0a259c76b8fdeb13cfb3950e7d0de7e66cc4865417c33e6fb272bb3393ca4654a61c5d03536dbf03dcb66f6828ded5bb6b54b927874e3e239f1fda3f3fd2188129c5bb3ace858dbf5f90150bbb4f58bc206d36a19c0289b30874ca30a649945a557a7880e3cd85de16208624097c428f33cdc7a10cc97494aae4b02d01014d0b18ba14ce2a1becf5e2fb90768dcd724d1440d79177e4d625ee3b7a36a43be3f672032e9753c7235d9e6ff974265f66ebcfe895a75bb21f7ca8ca490e47e33ae53a59c628a991495baf9b75403c73fff4f8d06d4381f23b7e14da75dde5b1f8acfa409dae302bcf0aadc141aa38d88fe24c3534cc5e7b6735eb2380652e162669b302ec1945760408b8467a642043e41958deaf1663da7fb5ea3ca85b6bd03311ef3bc693bbe9817461f3686eb685583448a162cfc8f8d436dcbc5a2833541d19fc0bec09567336118fe96dab8a9c5af7e90ccf12d4e36aa59b46994377ffb1c4e58cfd7b0f67a0e1a258b03861acb0927c2a17970be08ae21b8b708e61f3eff0e166c004b9edd4a1127ba9fe32b0c7b35b5040a28920dcf6e64d3642339ab8a27d8ae3f0416758c5ddc7c8cee63f887262eb0ef7c9fd42e4efb8ef9d03e0b1834afb88d2323087a482e257f699e1e680f0059fd5edb290bf74608c86900ff61d410c55c695fa9fcf59f465bdcd1c52fe357e8430d24cf9e1a1d3f18d323a55041259ebd261df6cb89397dc3d84f4d62bc35cb621614aa3c1d30eaaae36d02a92be9c1b52c84f5ea70fd2c5b535eb8752d0003cca6d0e67b931e1b46886ca96fac3722ec6588f94c3dfa38ae91e1be883ed523babc973c562d7ec842d4baa5b651d85838710bff63a58305516505fe61e896be0143e4ed752535d8c4403a80156aeda2d6a04cbe366988bf3996d37ae5b449a8e4853f81073c1ecbae9d04a32f179168b0f2817e03c87fb58f2928b57d910b42b7ff3ca1b6039a8f76e177b99ddecdb6cf2c54fdb580575dcf81a466fe450129d949ca7c43189331058f7e6edfe3a04d4c9f1daa872bb05d61a53035c0a5d189eccab6c208e0bd42b09f9b012c4016315d8f8f5a997519a4817ec992625eda8004684815b1482dda52320bed91185898460b2aaa6525c484fe62135c423622bdf9c4403ce728184afaa672d9782936dae6df63c19147a728bed4116ade32ff83f8d42bfc47fe75f09b8004584", 0x1000, 0x9}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6d76018cc0e68470d6ffff0000febfc23845bbcc42c95bdc49f811aaf662d902bf23f3b326ee8a50ab6631a4e4bc8a099f5d2e97"]) [ 1989.095995] cramfs: wrong magic 05:04:58 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="005a445ec7d1812df2a23c9fd2be1ab878bd84c75cdc1f462ff5a4335022900d4e93825de6885399f675ee4db4731f80dd1252d5e195aaece5"]) 05:04:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x25, 0x5, 0x0) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r6 = socket(0x25, 0x5, 0x0) connect$pptp(r6, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080)=0x2, 0x4) setuid(r5) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC=r5, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRESDEC, @ANYBLOB="2c7375626a5f747970653d2c646f6e745f61707072616973652c00910b8b"]) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x6, 0x80, 0x1, 0x9, 0x3, 0x3, 0x4, 0x1, 0x3, 0x6, 0x0, 0x7, 0x6, 0x0, 0x7f, 0xb}}) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000040)={0x3, @default, r5}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r7, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x40000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) readv(r8, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/134, 0x86}], 0x1) [ 1989.195963] cramfs: wrong magic [ 1989.216069] cramfs: wrong magic 05:04:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0x4}]}, 0x64}}, 0x0) 05:04:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x64, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb8cc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0x4}]}, 0x64}}, 0x0) [ 1989.265197] cramfs: wrong magic [ 1989.284559] cramfs: wrong magic 05:04:58 executing program 5: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100d2f3be793abbdb9e9e1591bc80e1508037278d34f31f7e376043eeb0936504b101757827049d6ad32314209bf9a484f7ba75ee9ced08ebff14809b50da6d9954108df340431fe55d4a21248812374b0105bdfd53ada985040374cf89d1c7121757a33770b26def7d9d33f05073fc916245f7213436a1ab2e9cedff51852052fb8f27597e4d32767e7427dc7"]) lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x3, 0xffffffff}]}, 0xc, 0x3) 05:04:58 executing program 0: syz_mount_image$cramfs(&(0x7f0000000000)='cramfs\x00', &(0x7f0000000040)='./bus\x00', 0x6, 0x0, &(0x7f0000000200), 0x1904492, &(0x7f0000000240)={[{'cramfs\x00'}, {'\x94i\x90vs\x00\x00'}]}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000080)={0x7, [0x7, 0x401, 0x5], [{0x6, 0x400, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x8, 0x0, 0x1, 0x1}, {0x4, 0x8, 0x1, 0x1, 0x1}, {0x1, 0x829c, 0x1, 0x1, 0x1}, {0xffff013d, 0x7fff, 0x0, 0x0, 0x1}, {0x3, 0x8000, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x1, 0x1}, {0x1, 0x7ff, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x7, 0x1}, {0xfacc, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x1}, {0x3, 0x1ff, 0x1, 0x0, 0x0, 0x1}], 0xffff}) 05:04:59 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x282340, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r3, 0xc00464af, &(0x7f0000000100)=0x7) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x4, r5, 0x3}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 1989.372731] cramfs: wrong magic [ 1989.415256] cramfs: wrong magic [ 1989.554211] audit: type=1804 audit(1609823099.189:8830): pid=32677 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1708/bus" dev="sda1" ino=15808 res=1 [ 1989.648106] audit: type=1804 audit(1609823099.249:8831): pid=32678 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1708/bus" dev="sda1" ino=15808 res=1 05:04:59 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:04:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) recvmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/95, 0x5f}, {&(0x7f00000002c0)=""/107, 0x6b}], 0x2}, 0x3) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) 05:04:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:04:59 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="93"]) 05:04:59 executing program 5 (fault-call:0 fault-nth:0): syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) 05:04:59 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xdc, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x33}}}}, [@NL80211_ATTR_VENDOR_DATA={0x30, 0xc5, "47c3683c0b6800f5df7fb56b426131533c8877ce6618c0a952a3eb1847e2be0eb47269c94e759b6251e5030b"}, @NL80211_ATTR_VENDOR_DATA={0x79, 0xc5, "3a8a6d195bfefc3e39fc4e413b109445fdaf609199b3631dcd8775e0d8d0898f3aaa1bbe7baae4f24a7dd612909e554b9cd360fae375a21fa7a084ab55ddaaddb2e2d5863752d21ebb1d507587444028785bc5abdd4befa1ecdc6684d04f7d6fd7a51dcf07b1779a1eb6d0458ea611be544b11f063"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8081}, 0x840) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400cf09", @ANYRES16=0x0, @ANYBLOB="010029bd7000dfdcdf2510000040"], 0x14}, 0x1, 0x0, 0x0, 0x44054}, 0x81) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}}, 0x0) fcntl$setpipe(r0, 0x407, 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000000)) [ 1990.333521] cramfs: wrong magic [ 1990.337809] FAULT_INJECTION: forcing a failure. [ 1990.337809] name failslab, interval 1, probability 0, space 0, times 0 [ 1990.376503] CPU: 1 PID: 32693 Comm: syz-executor.5 Not tainted 4.14.213-syzkaller #0 [ 1990.384418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1990.393776] Call Trace: [ 1990.396367] dump_stack+0x1b2/0x283 [ 1990.399998] should_fail.cold+0x10a/0x154 [ 1990.404145] should_failslab+0xd6/0x130 [ 1990.408112] kmem_cache_alloc+0x28e/0x3c0 [ 1990.412256] getname_flags+0xc8/0x550 [ 1990.416053] do_sys_open+0x1ce/0x410 [ 1990.419759] ? filp_open+0x60/0x60 [ 1990.423292] ? __do_page_fault+0x159/0xad0 [ 1990.427524] ? do_syscall_64+0x4c/0x640 [ 1990.431486] ? do_sys_open+0x410/0x410 [ 1990.435367] do_syscall_64+0x1d5/0x640 [ 1990.439271] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1990.444461] RIP: 0033:0x417d11 [ 1990.447640] RSP: 002b:00007fc9933ce810 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1990.455342] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417d11 [ 1990.462599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fc9933ce840 [ 1990.469858] RBP: 00007fc9933ceca0 R08: 000000000000000f R09: 0000000000000000 05:05:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) [ 1990.477138] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 [ 1990.484400] R13: 00007ffe41a313ef R14: 00007fc9933cf9c0 R15: 000000000119bf8c 05:05:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x8f4, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x1e}}}}, [@NL80211_ATTR_NAN_FUNC={0x1a4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x5}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x190, 0xd, 0x0, 0x1, [{0x92, 0x0, "b7cdcd237ab76217f63ea0321e04b98ebd2e5feccfed72fdf1aa707921bddad4c24615ec570fe9697f048b09984722ae45714cf33d09d1b1490433a7a31a7063c6d87efad21d4b7a937c66075f0ca2ca2b0aaacb1709e756bbd1aea81ec5ac42508e6a56353cdbac5c6677e48f24e349fddbeecb696298dd6d362da7c2e375901b742235c8352685381a390883e5"}, {0xf5, 0x0, "720c33c407aae3a1c1ecb746f0ef3244196b0654a0689c85ecc7a61b37f7c271a9a8451988fe0979fc13a85c67a1fa7dfd3f41e71bbef43500918bab20c3f85c1e8e3e7c252043af244dea89090455e61b65c710f8f6b0b0e676c79db099fb0b42e1c5224f0def98fd22653d73edac6abb16e4984bb3c02466567e0abebd06f5f8070aa6a68d886a906b7e9924c1f4d7c4ba412887fa63ef08284a8df7c50a79f709b5a2a721ddbbbc151c9bb12725aea303f71357f47ddeb48e9bf0ee2a80ca312359d842f093e5e2a93e9b8934750585e604f415d6e8ef36b29db3425d75ba9174cad5386e6278979c8e902c02b14d0e"}]}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0x3ac, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "7e018ca3efb3"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x368, 0xd, 0x0, 0x1, [{0x3c, 0x0, "fe44225023dc90644d8ac171483832bbae8a4d82a8d7e944ec3072858d33ecb968bf2e92c32ef39855f8c48a828422ee871dfe47fd2c5f79"}, {0xc5, 0x0, "2282fdac8137f1c35ce28ae409dd44f29c47f1ea3e292799d91914b6c8c1373711d3c5cb92d8dfea6ec8a12ebe1e9db9c919f4b8db10fee0b450d0536f74fda9df363ebce98c5fefc26ef62e55e48edf9fe08081824afca60329a8bbf7a444e98571ce8191c603e662cd59b79361d4725801e6c0466211f38d727688726112a15e33553cf96b10debf3cd59e4ea48b17455dd4533f886348f43ecc2a0e775c1fd27d393661ffa7d9b179c2802eb936fb2fddb94faf34c1b55f472ee0e52510859d"}, {0x102, 0x0, "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"}, {0x6d, 0x0, "a2a5a39a7799db5bd542692f3a9bf730ff07bae70ed645be345b692e5970c039eafd286172468c4d29b9621eb6a180fee1d99a85d0eb05b7d03c2340f93320275c99b2a5e3d3573b2650a56489f881f9d775ed6d0cfbb50013a9c52976a1272984110e46d34f55b995"}, {0xeb, 0x0, "929c89e60d7e977383626d9fb3380d7a54bd0cccc5bb9e5c0987b8492da3afbfb425f72fef67fe737844c8dbc66545a90ba6b7196680dd0297ba69d5d26acd827a93c578af70e928bd2254f8912fca0ca04b22b54c6c2d11e5308f97d65aae2e3fac52d8a8f5ff134bfe82c13ebf57a5439c709fb9dfdbd14864ab1fd49b2e9a1a28e19e60f238282027c595ff93202a0bb2cff241995926f83cd605fa0450da75d2df2b1704ad19f70fb0123cd440185b34069d565f73261ca393889af192a264ff06150ba0be91180986601a61c58f52fac0610854bccc1ae37120ec5801af9367553c7ed7b6"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xff}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x80000001}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x20}]}, @NL80211_ATTR_NAN_FUNC={0x358, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x1}, @NL80211_NAN_FUNC_TERM_REASON={0x5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x338, 0xe, 0x0, 0x1, [{0xa1, 0x0, "64db4fbf4ff5112581c77471d18b96bf5fdcf4165d7348569480171819c926f193daa740340099e174aca4961e37594bc2df7a43b015256e1bd278f81338c9db4f4933f7edc5bd3da84bdd108f4f519e87b84d261d8121c5a2aa92411d8299b66fc2d73720b5488fab5bfa0a602d8170745dfc64e20af2566d92cb9801ea4707f652b9f4e4ba8f0891da4768540a4b3b74892d77537c5e09aa058da8f8"}, {0xc0, 0x0, "6096135fd23f6018360cf8d7f67091c3476eaa0d2e40c55ac98ebd5884264dfe1560f2b02e22cfe42492febef4155dc8e8cd868a05c3860834c2e475969c030795fa1c4aa367747ee10b537c49ab436a597fb8a7e130eb97b08d69a1789960e361cc8bf978e5d7084ee239834fbdf31d71b64e8397f9b71d505b7e50220a42c24a93c99580c3aa528ce4ddd56782fa1b93f16ed8b058959aa4d4868635cdc407a75509155acf7ac28a925f9415cc7309b208ca57933fb83c1155c0ff"}, {0x10, 0x0, "45b74d4c2e65edcd478d8ab0"}, {0x4}, {0xd2, 0x0, "58add3b2552d95bb73e0bda3a161989909036b52e1c6194f5afdd8c980e92923b9bbe5c84643745c9b4fc377e69c89145dd580e9923fe3ec3392659117afacb533f86124fd840f67a17359ab7f4e479bfa6167e41ccbaa42f1929efbe342d087ceeb3a9e9f7c862d664f48e8e84f951681c995ca383262b6e779b5e6754c52fbdcd31d8a2a32b21c6fab37735d750bfb729a2103b9a9b87a666ce3a13e07231f6cdeaa640753cb7c0842dd057089a14d9f6740212f4e73d001bb553dfde9d8481cf3634ab5c196b5282ed648a642"}, {0xdc, 0x0, "3f2431181be7cd77574dc539994bedc60ecd327aa8c3c801fddc7c14062cade3e056bf985651c06ab800a3e1ae7d05e610b47b438543e0876fa75cd82473efcb0b0ca1ef7435b690d3c8107d6b120217a31cbc15628352ea9e86be927500c94b351ae5ca2ca9c26c4498ac3f34a79ff3028348afa6c36bb21bd9a75b07b03d588ea66df96d640556649dd6bbd9679363522c23c2fcfbe576598becd3abce363f44e9daf1105adea3c546f1fa9aa429c27b872d291e177d8c15b9b4ad6b31e9ccf4809ac47563de5645a19d3b66c401587987dff7b790c75e"}, {0xc, 0x0, "44ffdd69591cb094"}]}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}]}, 0x8f4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r6, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) [ 1990.529722] cramfs: wrong magic 05:05:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) 05:05:00 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20}, @in={0x2, 0x6, @empty}, @in={0x2, 0x4e21, @loopback}], 0x3c) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)=""/77, &(0x7f00000000c0)=0x4d) 05:05:00 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_NUM_WAITING(r4, 0x227d, &(0x7f0000000180)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0xfd04) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0x9b0000, 0x3, 0x3, r5, 0x0, &(0x7f00000000c0)={0x990a60, 0xfffffff8, [], @p_u16=&(0x7f0000000040)=0x5}}) poll(&(0x7f0000000000)=[{r0, 0x4c3}, {r2, 0x540}, {r1, 0x500}], 0x3, 0x2) [ 1990.631254] cramfs: wrong magic [ 1990.684556] cramfs: wrong magic 05:05:01 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) 05:05:01 executing program 5 (fault-call:0 fault-nth:1): syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) 05:05:01 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00ccbcd2f99957d15814cb45b1e886514e6e29449bc28ba936559cd3339656302cd863ffaf71585594b5c991cb53602243f49bdb738584b70a478e4ec13fbc51679dfc35ae4d30f6dc3e91c910516749ce86318392c51df2b9ffd7b86d1711a3c1eb2802a2f167ca3506111cfa38f911e5ff288feee5800561fdbf46aaa339d5aad47bec2f6a0d6a1acbf70a2afad47f23b6bdfc456ded10"]) 05:05:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) fgetxattr(r1, &(0x7f0000000000)=@known='user.incfs.id\x00', &(0x7f0000000040)=""/180, 0xb4) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f00000001c0)=0x9) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:01 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x12000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0xc004743e, &(0x7f0000000100)='&@[\x00\x15y\xad\x1f\xf9aY\x96\xae\xd5\x13\xa9Mu\xd0\xc9\xdf\xde\x15\xa4\xa95\xd4\x8a-0F\xa1\xf1\xbb\xbba\'O\xedS4\v_\x11\x1f\xf6\xdc_\xd4A\xbb\xa6O\xf9\xb30\xe6\x12B\x00FK\xa5]\xff\x85V?\b\x89\x82\x9c\xad\xae\xbf-\xf3.Ir\xbaLt\x84Z\xae\x1b\x18\x1c\x86\x87t\xee\x9e<]Y\xa6\xa82Y\xdc\x8aj') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 1991.513246] FAULT_INJECTION: forcing a failure. [ 1991.513246] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1991.525078] CPU: 1 PID: 310 Comm: syz-executor.5 Not tainted 4.14.213-syzkaller #0 [ 1991.532780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1991.542128] Call Trace: [ 1991.544713] dump_stack+0x1b2/0x283 [ 1991.548362] should_fail.cold+0x10a/0x154 [ 1991.552504] ? check_preemption_disabled+0x35/0x240 [ 1991.557518] __alloc_pages_nodemask+0x22c/0x2720 [ 1991.562312] ? __lock_acquire+0x5fc/0x3f20 [ 1991.566545] ? get_pid_task+0x91/0x130 [ 1991.570427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1991.575280] ? lock_downgrade+0x740/0x740 [ 1991.579422] ? check_preemption_disabled+0x35/0x240 [ 1991.584431] ? perf_trace_lock+0xf7/0x490 [ 1991.588576] ? perf_trace_lock_acquire+0x510/0x510 [ 1991.593500] ? perf_trace_lock_acquire+0x510/0x510 [ 1991.598433] ? perf_trace_lock+0xf7/0x490 [ 1991.602578] cache_grow_begin+0x8f/0x420 [ 1991.606636] cache_alloc_refill+0x273/0x350 [ 1991.610957] kmem_cache_alloc+0x333/0x3c0 [ 1991.615111] getname_flags+0xc8/0x550 [ 1991.618914] do_sys_open+0x1ce/0x410 [ 1991.622625] ? filp_open+0x60/0x60 [ 1991.626167] ? __do_page_fault+0x159/0xad0 [ 1991.630399] ? do_syscall_64+0x4c/0x640 [ 1991.634382] ? do_sys_open+0x410/0x410 [ 1991.638251] do_syscall_64+0x1d5/0x640 [ 1991.642123] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1991.647297] RIP: 0033:0x417d11 [ 1991.650462] RSP: 002b:00007fc9933ce810 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1991.658148] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417d11 [ 1991.665392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fc9933ce840 [ 1991.672637] RBP: 00007fc9933ceca0 R08: 000000000000000f R09: 0000000000000000 [ 1991.679886] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 [ 1991.687181] R13: 00007ffe41a313ef R14: 00007fc9933cf9c0 R15: 000000000119bf8c 05:05:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x23, 0x6, 0x3f) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400f6}, 0xa805) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x6000) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000), 0x0) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r9, 0x4008af23, &(0x7f0000000340)={0x3, 0x1ff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="000000194d277d5db77c48861d", @ANYRES16=r7, @ANYBLOB="110700000000000600000900000008000300ae0ec894d1198f6d8f740b67f22b72a54ae24eacedd11077c1da4512dc23a88fbb2cdf3be1f48d69fe753925bc652be7d4813fcb884c059080653bfa2859184b", @ANYRES32=r6, @ANYBLOB="14712d669f344d44755eda8e649621b3eeb8ae90504dddeb083e8c4cdbdf2356618cb0f70fac973bf02e428b9c34ee2b"], 0x1c}}, 0x0) 05:05:01 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) close(r0) epoll_create(0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x2, @private=0xa010101}}, 0x1e) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f00000000c0)={0x1, 0xe5000, 0x6, 0xe34c, 0x1f, 0x400000000000, 0x100000000, 0x40, 0x4f9, 0x1, 0x4, 0x3}) [ 1991.733639] cramfs: wrong magic 05:05:01 executing program 1 (fault-call:2 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:01 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="089c7bd97b2b35eaf4547c9fb8813f73cbe235a5bbdc063792b33175a647338fd48a43c134cb42f8415877ded6e8ce4b023463e30ed13c000000"]) 05:05:01 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000040)={0xf, 0x4}) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 1991.808812] kauditd_printk_skb: 2 callbacks suppressed [ 1991.808819] audit: type=1804 audit(1609823101.449:8834): pid=335 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1710/bus" dev="sda1" ino=17412 res=1 [ 1991.926707] cramfs: wrong magic [ 1991.964609] audit: type=1804 audit(1609823101.599:8835): pid=347 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1710/bus" dev="sda1" ino=17412 res=1 [ 1991.976466] FAULT_INJECTION: forcing a failure. [ 1991.976466] name failslab, interval 1, probability 0, space 0, times 0 05:05:01 executing program 3: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1992.142966] CPU: 1 PID: 349 Comm: syz-executor.1 Not tainted 4.14.213-syzkaller #0 [ 1992.150697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.160043] Call Trace: [ 1992.162622] dump_stack+0x1b2/0x283 [ 1992.166242] should_fail.cold+0x10a/0x154 [ 1992.170411] should_failslab+0xd6/0x130 [ 1992.174400] kmem_cache_alloc_node+0x263/0x410 [ 1992.178976] __alloc_skb+0x5c/0x510 [ 1992.182598] netlink_sendmsg+0x901/0xb80 [ 1992.186652] ? nlmsg_notify+0x170/0x170 [ 1992.190613] ? kernel_recvmsg+0x210/0x210 [ 1992.194753] ? security_socket_sendmsg+0x83/0xb0 [ 1992.199504] ? nlmsg_notify+0x170/0x170 [ 1992.203473] sock_sendmsg+0xb5/0x100 [ 1992.207178] ___sys_sendmsg+0x6c8/0x800 [ 1992.211145] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1992.215893] ? perf_trace_lock_acquire+0x510/0x510 [ 1992.220811] ? check_preemption_disabled+0x35/0x240 [ 1992.225845] ? __fget+0x1fe/0x360 [ 1992.229296] ? lock_acquire+0x170/0x3f0 [ 1992.233261] ? lock_downgrade+0x740/0x740 [ 1992.237404] ? __fget+0x225/0x360 [ 1992.240859] ? __fdget+0x196/0x1f0 [ 1992.244395] ? sockfd_lookup_light+0xb2/0x160 [ 1992.248886] __sys_sendmsg+0xa3/0x120 [ 1992.252685] ? SyS_shutdown+0x160/0x160 [ 1992.256653] ? wait_for_completion_io+0x10/0x10 [ 1992.261326] ? SyS_read+0x210/0x210 [ 1992.264945] ? SyS_clock_settime+0x1a0/0x1a0 [ 1992.269345] SyS_sendmsg+0x27/0x40 [ 1992.272889] ? __sys_sendmsg+0x120/0x120 [ 1992.276945] do_syscall_64+0x1d5/0x640 [ 1992.280828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1992.286008] RIP: 0033:0x45e219 [ 1992.289186] RSP: 002b:00007f955d047c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1992.296885] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1992.304147] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1992.311405] RBP: 00007f955d047ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1992.318665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1992.325944] R13: 00007ffdb0e9697f R14: 00007f955d0489c0 R15: 000000000119bf8c 05:05:02 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:02 executing program 0: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x101000, 0x0) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000140)="cc15c27d7962ad57eea1d066", 0xc, 0x4}, {&(0x7f0000000180)="cd49914837ca0ccf3c332ebaccc8c55d5376b4196d26289fbee4250ffc15", 0x1e, 0x2}, {&(0x7f0000000340)="5cd8681fe7b2f6f8814b435415b01bda60f063bf3545fa521ea88fa5e359841b6a68030be1a030003627e73344a87fa9b1f43f98a14754cc90d49ad843137e1458436b184187dca9f0700f8ba9943d424f135793e52b23daca59050fca1faccaf84d75ffeec56e971736abe65ab2b9101a31d17525fef15e46c1c53b602931e5eb524b5537b9a0446d201d468a88f6113a99acccc079bf17732ca0b723e91a365ad9b6812a2a8661fac933eab1b483", 0xaf, 0x1}, {&(0x7f00000001c0)="16f0ba4ef73b99790811ce37cf3c4ac82c2974acddbfb7db2dc743343c9faec622e7bd8725258f16de86d219d7bb5a1217a1e9305f9dcf8805141900b28a193a664d7ffa3a039baa44eef76aea", 0x4d, 0x5}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="003ec88f019cedc58f2d42d12560ea7ab8d8edb6e1d6048331383dec3bf02ec844bc56ab55b147b7506bed5d01e83cc61cfcc0e3a13bcd898e50d9e5e1f720523afc61ce878ad64e79f1c01fa7cfa607408afb0277970b8740847b0171120375422bc16a1fc01c7f50a280c469203d4957ef447428d9366720fd589ff7e1492533a244b7b91368f2bfd7468b957ac72e96b0301f8a705d9d63f48297bb5b6e16a6ef90f205d74ebf5805634c1da7f2cde9c151ff6288dfcbfbe67845f20f817b190e8b2800b74dea892595b23cf0a762d7066b4d80784c661d8dd8a7c0ccb47153"]) 05:05:02 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x200) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0xffff, 0x9, 0x1, 0x1, 0x200, 0x0, 0x5, 0xffffffdc, 0x2, 0x0, 0x7, 0x8, 0x4, 0xfffffffc, 0x0, 0x35, {0x8, 0x2}, 0x2, 0x9}}) 05:05:02 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x100000}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(r0) r1 = syz_mount_image$vxfs(&(0x7f0000000000)='vxfs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000200)=[{&(0x7f00000000c0)="1f0039997a2075bf6a15bfe9387ea8e2dee8e0e82a0069b1de98837659c21710ae9c3af13e7ed7d6bf2ae1b2ce6ddf54d6b5bb94c2c3cc5d695df7b96a2be95d597815b2bc67bcf741f1f2f3ac7c", 0x4e}, {&(0x7f0000000140)="37b5938b059a3029670fe581a624fb0b5303992ff7c61db246f548edf317fd0247e7365521ded3da3b315e2625e2fed2ca08af4dadc6", 0x36, 0x1f}, {&(0x7f0000000180)="c18bcd8513fc6b7777fff78dcd29d8792b22788a57e08510e021bdccadf55db3e696e86553bbbba11b1a0804ce78ade4b307c08f0dbfac33c17b04c98b506378c311b8855bb28a879d7602583d3f635473115102b34e8e5ac81e48cd472ab631aefb87b2cf0dd11e775907378a6919faaa903653cbf331", 0x77, 0x80}], 0x40, &(0x7f0000000280)={[{'/dev/ppp\x00'}, {'&@[\x00'}, {'&@[\x00'}, {'/dev/ppp\x00'}, {'&@[\x00'}, {}, {}], [{@fowner_eq={'fowner'}}, {@permit_directio='permit_directio'}, {@dont_measure='dont_measure'}, {@obj_type={'obj_type', 0x3d, '+\xf8+^,@'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) fcntl$setsig(r1, 0xa, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fbdbdf2504000000050037000000000005002e00000000000800390001000000050029000000000008002c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 05:05:02 executing program 1 (fault-call:2 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) [ 1992.830156] FAULT_INJECTION: forcing a failure. [ 1992.830156] name failslab, interval 1, probability 0, space 0, times 0 [ 1992.844610] CPU: 0 PID: 375 Comm: syz-executor.1 Not tainted 4.14.213-syzkaller #0 [ 1992.852323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1992.861665] Call Trace: [ 1992.864248] dump_stack+0x1b2/0x283 [ 1992.867878] should_fail.cold+0x10a/0x154 [ 1992.872028] should_failslab+0xd6/0x130 [ 1992.876003] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1992.881108] __kmalloc_node_track_caller+0x38/0x70 [ 1992.884718] cramfs: wrong magic [ 1992.886036] __alloc_skb+0x96/0x510 [ 1992.886053] netlink_sendmsg+0x901/0xb80 [ 1992.886070] ? nlmsg_notify+0x170/0x170 [ 1992.900961] ? kernel_recvmsg+0x210/0x210 [ 1992.905123] ? security_socket_sendmsg+0x83/0xb0 [ 1992.909874] ? nlmsg_notify+0x170/0x170 [ 1992.913843] sock_sendmsg+0xb5/0x100 [ 1992.917554] ___sys_sendmsg+0x6c8/0x800 [ 1992.921526] ? copy_msghdr_from_user+0x3b0/0x3b0 05:05:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x4, 0x0, 0x700) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4000, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x54, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7eeb961c}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2eac}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffc00}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x80) [ 1992.921635] vxfs: WRONG superblock magic 00000000 at 1 [ 1992.926278] ? perf_trace_lock_acquire+0x510/0x510 [ 1992.926291] ? check_preemption_disabled+0x35/0x240 [ 1992.926303] ? __fget+0x1fe/0x360 [ 1992.926314] ? lock_acquire+0x170/0x3f0 [ 1992.948900] ? lock_downgrade+0x740/0x740 [ 1992.953070] ? __fget+0x225/0x360 [ 1992.956519] ? __fdget+0x196/0x1f0 [ 1992.960056] ? sockfd_lookup_light+0xb2/0x160 [ 1992.964549] __sys_sendmsg+0xa3/0x120 [ 1992.968344] ? SyS_shutdown+0x160/0x160 [ 1992.972311] ? wait_for_completion_io+0x10/0x10 [ 1992.976985] ? SyS_read+0x210/0x210 [ 1992.980357] vxfs: WRONG superblock magic 00000000 at 8 [ 1992.980609] ? SyS_clock_settime+0x1a0/0x1a0 [ 1992.990300] SyS_sendmsg+0x27/0x40 [ 1992.993834] ? __sys_sendmsg+0x120/0x120 [ 1992.997887] do_syscall_64+0x1d5/0x640 [ 1993.001778] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1993.006962] RIP: 0033:0x45e219 [ 1993.009445] vxfs: can't find superblock. [ 1993.010145] RSP: 002b:00007f955d047c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1993.021883] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 05:05:02 executing program 1 (fault-call:2 fault-nth:2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:02 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = socket(0x10, 0x80000, 0x6) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, 0x8) init_module(&(0x7f0000000040)='[\x02}*\x00', 0x5, &(0x7f0000000080)='/dev/raw/raw#\x00') 05:05:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48894}, 0x8000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r2, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x1c}}, 0x0) [ 1993.029148] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1993.036452] RBP: 00007f955d047ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1993.043716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1993.051013] R13: 00007ffdb0e9697f R14: 00007f955d0489c0 R15: 000000000119bf8c 05:05:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$sock(r1, &(0x7f0000000240)={&(0x7f0000000000)=@ipx={0x4, 0x9, 0x1, "b6e13cd6b447", 0x6c}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="85fe4cadfd57df6ecdc22e684d8517e4f218725a39d5dd21970a4a7d43f9f0edb3edc439293c11dec508f649e43d7bbdbcea5c4cffa87ec7b045c20e31f9eeec6a312048cd6f017d402d469f9d624dba1721bcf3a0c00e7876c9c766c53c289e31a1938b36143ccbef2e17d8002a5252823221ed5555e2f85c085509e767", 0x7e}], 0x1, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1140}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xc0}, 0x40000) 05:05:02 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) set_thread_area(&(0x7f0000000000)={0x63397df6, 0xffffffffffffffff, 0x400, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1}) [ 1993.116061] cramfs: wrong magic [ 1993.119473] vxfs: WRONG superblock magic 00000000 at 1 [ 1993.126970] vxfs: WRONG superblock magic 00000000 at 8 [ 1993.146608] vxfs: can't find superblock. [ 1993.148492] FAULT_INJECTION: forcing a failure. [ 1993.148492] name failslab, interval 1, probability 0, space 0, times 0 [ 1993.215023] CPU: 1 PID: 408 Comm: syz-executor.1 Not tainted 4.14.213-syzkaller #0 [ 1993.222761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1993.226007] cramfs: wrong magic [ 1993.232313] Call Trace: [ 1993.232330] dump_stack+0x1b2/0x283 [ 1993.232349] should_fail.cold+0x10a/0x154 [ 1993.245934] ? perf_trace_lock_acquire+0x510/0x510 [ 1993.250869] should_failslab+0xd6/0x130 [ 1993.254844] kmem_cache_alloc+0x40/0x3c0 [ 1993.258908] skb_clone+0x126/0x9a0 [ 1993.262457] netlink_deliver_tap+0x655/0x7d0 [ 1993.266871] netlink_unicast+0x485/0x610 [ 1993.270944] ? netlink_sendskb+0xd0/0xd0 [ 1993.275003] ? __check_object_size+0x179/0x22c [ 1993.279586] netlink_sendmsg+0x62e/0xb80 [ 1993.283649] ? nlmsg_notify+0x170/0x170 [ 1993.287619] ? kernel_recvmsg+0x210/0x210 [ 1993.291771] ? security_socket_sendmsg+0x83/0xb0 [ 1993.296522] ? nlmsg_notify+0x170/0x170 [ 1993.300492] sock_sendmsg+0xb5/0x100 [ 1993.304218] ___sys_sendmsg+0x6c8/0x800 [ 1993.308192] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1993.312954] ? perf_trace_lock_acquire+0x510/0x510 [ 1993.317882] ? check_preemption_disabled+0x35/0x240 [ 1993.322896] ? __fget+0x1fe/0x360 [ 1993.326374] ? lock_acquire+0x170/0x3f0 [ 1993.330348] ? lock_downgrade+0x740/0x740 [ 1993.334502] ? __fget+0x225/0x360 [ 1993.337962] ? __fdget+0x196/0x1f0 [ 1993.341501] ? sockfd_lookup_light+0xb2/0x160 [ 1993.345995] __sys_sendmsg+0xa3/0x120 [ 1993.349792] ? SyS_shutdown+0x160/0x160 [ 1993.353763] ? wait_for_completion_io+0x10/0x10 [ 1993.358473] ? SyS_read+0x210/0x210 [ 1993.362118] ? SyS_clock_settime+0x1a0/0x1a0 [ 1993.366540] SyS_sendmsg+0x27/0x40 [ 1993.370075] ? __sys_sendmsg+0x120/0x120 [ 1993.374138] do_syscall_64+0x1d5/0x640 [ 1993.378033] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1993.383220] RIP: 0033:0x45e219 [ 1993.386406] RSP: 002b:00007f955d047c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1993.394244] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1993.401512] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1993.408786] RBP: 00007f955d047ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1993.416049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1993.423316] R13: 00007ffdb0e9697f R14: 00007f955d0489c0 R15: 000000000119bf8c [ 1993.461995] cramfs: wrong magic [ 1993.633180] audit: type=1804 audit(1609823103.269:8836): pid=451 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1711/bus" dev="sda1" ino=15789 res=1 [ 1993.721512] audit: type=1804 audit(1609823103.339:8837): pid=452 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1711/bus" dev="sda1" ino=15789 res=1 05:05:04 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:04 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1de, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:04 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3f, 0x0, 0x81}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x3fc2, 0x9, 0x6, 0x3f, 0x2, 0x32a}) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) 05:05:04 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0002f9b95e0021c7cb616e6b44a3ba500a2c3d3a68c2a0d85c8c04000000277e35bc2c4bd4478b8c5d455bea7e64d4dfb5b742e8beec844a460d583f3b5ed7fc6fe1a6ab60b0449b4d7c8b373c309ee1e5d1037e3b70acd5fc6c25c69eb4b9796921d03a2618df7b405055cdd5f8dd74b973fcd65f36e8ead429224be8403c7498a126bb16129b2476773112cda41c67736c91991fa1faaf45fde571f78fc817b7a70f018b331ebf5ab27642c2ccb68c495f5ad67c095b5d2a31b981a6c9fde88512a23cbe534b8d4d462cc5dd8f3dd34ad2b0a6e2fbc52786fbe6b947d3"]) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000000)=""/71) 05:05:04 executing program 1 (fault-call:2 fault-nth:3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) [ 1994.461670] cramfs: wrong magic 05:05:04 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0xc2402) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) readv(r0, &(0x7f0000002300)=[{&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000080)=""/160, 0xa0}, {&(0x7f0000002200)=""/255, 0xff}, {&(0x7f0000000140)=""/17, 0x11}], 0x6) 05:05:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xaec7, 0x6000) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000780)={0x0, 0x3, 0x3}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000480)=""/83) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x400}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000240)={r5, 0x400}, 0x8) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x94, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x59}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000840}, 0x44) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm_plock\x00', 0x101000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x178, r8, 0xb00, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbb}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7e3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa57}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x465e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3bb1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x47}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000800}, 0x50) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0xffffffffffffffc5, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x3}]}, 0x1c}}, 0x0) [ 1994.495532] FAULT_INJECTION: forcing a failure. [ 1994.495532] name failslab, interval 1, probability 0, space 0, times 0 05:05:04 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7}, &(0x7f00000000c0)=0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000000)=0x3) [ 1994.537481] cramfs: wrong magic [ 1994.546144] CPU: 0 PID: 466 Comm: syz-executor.1 Not tainted 4.14.213-syzkaller #0 [ 1994.553866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1994.563214] Call Trace: [ 1994.565802] dump_stack+0x1b2/0x283 [ 1994.569439] should_fail.cold+0x10a/0x154 [ 1994.573609] should_failslab+0xd6/0x130 [ 1994.577581] kmem_cache_alloc_node+0x263/0x410 [ 1994.582167] __alloc_skb+0x5c/0x510 [ 1994.585801] netlink_dump+0x21b/0xad0 [ 1994.589609] __netlink_dump_start+0x4e2/0x740 [ 1994.594104] ? genl_lock_dumpit+0x90/0x90 [ 1994.598252] genl_family_rcv_msg+0x95c/0xb20 [ 1994.602670] ? __lock_acquire+0x5fc/0x3f20 [ 1994.606904] ? genl_rcv+0x40/0x40 [ 1994.610356] ? genl_lock_dumpit+0x90/0x90 [ 1994.614502] ? genl_lock_done+0xc0/0xc0 [ 1994.618471] ? genl_unlock+0x20/0x20 [ 1994.622185] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1994.627198] ? __dev_queue_xmit+0xc96/0x2480 [ 1994.631601] ? __local_bh_enable_ip+0xc1/0x170 05:05:04 executing program 5: sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="6ceee1ad674205667458a0043080eeb0f186c40b0ac41a0c02a6fb78d88b702e750d3e23c23229e9", @ANYRES16=0x0, @ANYBLOB="000826bd7000ffdbdf8daf3643e4483302fd20d14322250600000008000400ffffffff030000de002f6465762f7261772f7261772300000008001c0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x4010) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) [ 1994.636175] ? __dev_queue_xmit+0xcd6/0x2480 [ 1994.640584] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1994.645171] genl_rcv_msg+0xaf/0x140 [ 1994.648883] netlink_rcv_skb+0x125/0x390 [ 1994.652947] ? genl_family_rcv_msg+0xb20/0xb20 [ 1994.657528] ? netlink_ack+0x9a0/0x9a0 [ 1994.661414] ? lock_acquire+0x170/0x3f0 [ 1994.665395] genl_rcv+0x24/0x40 [ 1994.668673] netlink_unicast+0x437/0x610 [ 1994.672833] ? netlink_sendskb+0xd0/0xd0 [ 1994.676894] ? __check_object_size+0x179/0x22c [ 1994.681479] netlink_sendmsg+0x62e/0xb80 05:05:04 executing program 5: syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x1, 0xecb40) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="80000000c72fac91bc77d1f599343bf3035f6808020b422a4fc18f15d911fc56079f689f827a582875b596644821bcf6559959ec7a6035d671bc12563cacf877ec4e550eae67423cd1e3a3969ac95bb63747c6817ed480e6886fa8c22b2afccb3e2599319313d40e25925911d3155b0cdd3927f314d300"/132], &(0x7f0000000000)=0x88) r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x62) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r0, 0x7ff}, &(0x7f0000000180)=0x8) exit_group(0x10000) [ 1994.685545] ? nlmsg_notify+0x170/0x170 [ 1994.689523] ? kernel_recvmsg+0x210/0x210 [ 1994.693673] ? security_socket_sendmsg+0x83/0xb0 [ 1994.698428] ? nlmsg_notify+0x170/0x170 [ 1994.702402] sock_sendmsg+0xb5/0x100 [ 1994.706112] ___sys_sendmsg+0x6c8/0x800 [ 1994.710091] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1994.714849] ? perf_trace_lock_acquire+0x510/0x510 [ 1994.719780] ? check_preemption_disabled+0x35/0x240 [ 1994.724814] ? __fget+0x1fe/0x360 [ 1994.728276] ? lock_acquire+0x170/0x3f0 [ 1994.732247] ? lock_downgrade+0x740/0x740 [ 1994.736401] ? __fget+0x225/0x360 [ 1994.739856] ? __fdget+0x196/0x1f0 [ 1994.743395] ? sockfd_lookup_light+0xb2/0x160 [ 1994.747889] __sys_sendmsg+0xa3/0x120 [ 1994.751702] ? SyS_shutdown+0x160/0x160 [ 1994.751715] ? wait_for_completion_io+0x10/0x10 [ 1994.751735] ? SyS_read+0x210/0x210 [ 1994.751747] ? SyS_clock_settime+0x1a0/0x1a0 [ 1994.768368] SyS_sendmsg+0x27/0x40 [ 1994.771902] ? __sys_sendmsg+0x120/0x120 [ 1994.776049] do_syscall_64+0x1d5/0x640 [ 1994.779948] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1994.785130] RIP: 0033:0x45e219 05:05:04 executing program 5: ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x7, 0xbd, 0x3, {0xed69d90e250d88a8, @sdr={0x3432564e, 0x6}}, 0x3}) r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x4, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) [ 1994.788316] RSP: 002b:00007f955d047c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1994.796027] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1994.803290] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1994.810552] RBP: 00007f955d047ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1994.817816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1994.825079] R13: 00007ffdb0e9697f R14: 00007f955d0489c0 R15: 000000000119bf8c [ 1995.106057] audit: type=1804 audit(1609823104.740:8838): pid=519 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1712/bus" dev="sda1" ino=15789 res=1 [ 1995.188799] audit: type=1804 audit(1609823104.820:8839): pid=520 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1712/bus" dev="sda1" ino=15789 res=1 05:05:05 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:05 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="d75b2d0716ec39e8afb49bbe69b5ed8573fadb31383ecb362734a863982534a24f2c325a9b38b06366b4f38a922a211680adab307c6a15d5aa967a3cf76307293069ea04e7d9929d17a28cc58e02f87685a10a111ef82a847dccb50c80eae40844a00252231c2f551df396c387aa92d1a32143271c40a0cbfe5463867e58394368c889bbee24688720fd0c447b9f82d189856dad4dd0d56b41c662f8bd34e2f9e84cc77a9508a89d23", 0xa9, 0x9}, {&(0x7f0000000340)="7b1ad5813b915f60677fb4ded8bed5b6a7c6fa1f8ff018320e4fbb4e756d7852f58e860aa507ec6def2262ae42d3d0c036067f342631a248c109fbf184652abd282255764f5f9994826406e8f914da5aaca389f4a33e3d917de3e1c55a0d71ab62355b4fcfe24ea754f457550e74e22bc0dcbc7c0a94cacfde9b7fd0e1cde160ed2374bee6f97e0c4ee418c76947e163fe3e9a2f7ac2786d14e5f452386644aed490192f9f35551ed453d32aa674d3fcf5c012b7e71b64504b1b806f86ea0bb4436ab8e2ce63bee23b56", 0xca, 0x7}], 0x42800, &(0x7f0000000640)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000200)=[0x3, 0x1], 0x2) r0 = open$dir(&(0x7f00000001c0)='./bus\x00', 0x80003, 0x0) fcntl$getflags(r0, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x804c00, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x80002000}) 05:05:05 executing program 1 (fault-call:2 fault-nth:4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:05 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:05 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f00000002c0)={@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xc, 0x0, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0xfd04) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000000c0)={0x3, &(0x7f0000000000)="b1788d41997306a43bada33fb0f7c65b845d6894e34b1ae5e94f6b395e4a29b4e76920264e6db174b2f5cb866da0cb54c7929381a1103b33919dd18d5425f8d61d58bb01704430413c18fdbb9089d3d5948fa494ed70ff6891b4dbbad84a8acc4eddf2d53d71371b4d123752362b7aa75754688555b8805632fbf82d2ae8aa95b74eb77200706789cb2aba"}) 05:05:05 executing program 5: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x109500) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000080)=0x5) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="0403000012008502000000000000000000400000000000000000000000000000000000000300000000000000000000000000000013efa102", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000002b800010007d854"], 0x304}}, 0x0) syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x313142) 05:05:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:05:05 executing program 5: r0 = syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000001240)={{r0}, "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"}) pwritev(r0, &(0x7f0000001200)=[{&(0x7f0000000000)="973c1a5f3ec97e057147d70728208adf845af6cc04baae1de97a65112aa506fac11dc05b408c06c380ae78c5737a143198ed222c7a8df2dc35f7081e5c3364dddf11a10074aee915d0ac6ec823268edcb2d69561120858630115dc59d14303e1e86bfc28bc22c523f75ef06ae3a1dd60fa83c5678256ce386a628689e025e22917bd8033912373bcc10dfb26b45285b5bfe760098805946be99925a2d438b4a6b33e3cb5705fa9a3c60d28c297fb907aed42", 0xb2}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f00000000c0)="a84c4a37f454ce4a7099f8dedb", 0xd}, {&(0x7f0000000100)="dea2e589589fe81dca378e811e5f83f3f4c6335e3283263dca90e978efef817458e5439594d7caf869adb5888473234aa4c3ee044bfbfbf4325ebbc247ad14f347e5dc772ba94c0d47d32dbf5c44198fd08b26108ad2bac59e66d807fb637bd2c9e0f08fc5b2ba65c4bcd50f827f77cfd53a13222e3529c286175985f7f022065b48c42b435c5f9610b30399e5", 0x8d}], 0x4, 0x6000, 0xa59b) [ 1995.939495] FAULT_INJECTION: forcing a failure. [ 1995.939495] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.017367] CPU: 1 PID: 529 Comm: syz-executor.1 Not tainted 4.14.213-syzkaller #0 [ 1996.025107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1996.034460] Call Trace: [ 1996.037050] dump_stack+0x1b2/0x283 [ 1996.040681] should_fail.cold+0x10a/0x154 [ 1996.044832] should_failslab+0xd6/0x130 [ 1996.048804] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1996.053907] __kmalloc_node_track_caller+0x38/0x70 [ 1996.058833] __alloc_skb+0x96/0x510 [ 1996.062477] netlink_dump+0x21b/0xad0 05:05:05 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/245, 0xf5}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/180, 0xb4}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/67, 0x43}, {&(0x7f0000000500)=""/205, 0xcd}, {&(0x7f00000006c0)=""/155, 0x9b}], 0x8}, 0x100) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x2, 0x0, @remote}, &(0x7f0000000800)=0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0xfd04) ioctl$FICLONE(r3, 0x40049409, r1) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e23, @remote}}}, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, &(0x7f0000000000)={0x8, 0x0, 0x6, 0x404}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1996.066276] __netlink_dump_start+0x4e2/0x740 [ 1996.070763] ? genl_lock_dumpit+0x90/0x90 [ 1996.074909] genl_family_rcv_msg+0x95c/0xb20 [ 1996.079312] ? __lock_acquire+0x5fc/0x3f20 [ 1996.083541] ? genl_rcv+0x40/0x40 [ 1996.086988] ? genl_lock_dumpit+0x90/0x90 [ 1996.091132] ? genl_lock_done+0xc0/0xc0 [ 1996.095121] ? genl_unlock+0x20/0x20 [ 1996.098848] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1996.103862] ? __dev_queue_xmit+0xc96/0x2480 [ 1996.108265] ? __local_bh_enable_ip+0xc1/0x170 [ 1996.112840] ? __dev_queue_xmit+0xcd6/0x2480 [ 1996.117242] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1996.121817] genl_rcv_msg+0xaf/0x140 [ 1996.125509] netlink_rcv_skb+0x125/0x390 [ 1996.129548] ? genl_family_rcv_msg+0xb20/0xb20 [ 1996.134109] ? netlink_ack+0x9a0/0x9a0 [ 1996.138009] ? lock_acquire+0x170/0x3f0 [ 1996.141970] genl_rcv+0x24/0x40 [ 1996.145227] netlink_unicast+0x437/0x610 [ 1996.149269] ? netlink_sendskb+0xd0/0xd0 [ 1996.153308] ? __check_object_size+0x179/0x22c [ 1996.157875] netlink_sendmsg+0x62e/0xb80 [ 1996.161922] ? nlmsg_notify+0x170/0x170 [ 1996.165874] ? kernel_recvmsg+0x210/0x210 [ 1996.170002] ? security_socket_sendmsg+0x83/0xb0 [ 1996.174732] ? nlmsg_notify+0x170/0x170 [ 1996.178728] sock_sendmsg+0xb5/0x100 [ 1996.182439] ___sys_sendmsg+0x6c8/0x800 [ 1996.186408] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1996.191201] ? perf_trace_lock_acquire+0x510/0x510 [ 1996.196108] ? check_preemption_disabled+0x35/0x240 [ 1996.201158] ? __fget+0x1fe/0x360 [ 1996.204590] ? lock_acquire+0x170/0x3f0 [ 1996.208542] ? lock_downgrade+0x740/0x740 [ 1996.212670] ? __fget+0x225/0x360 [ 1996.216101] ? __fdget+0x196/0x1f0 [ 1996.219623] ? sockfd_lookup_light+0xb2/0x160 [ 1996.224101] __sys_sendmsg+0xa3/0x120 [ 1996.227942] ? SyS_shutdown+0x160/0x160 [ 1996.231895] ? wait_for_completion_io+0x10/0x10 [ 1996.236544] ? SyS_read+0x210/0x210 [ 1996.240237] ? SyS_clock_settime+0x1a0/0x1a0 [ 1996.244749] SyS_sendmsg+0x27/0x40 [ 1996.248264] ? __sys_sendmsg+0x120/0x120 [ 1996.252343] do_syscall_64+0x1d5/0x640 [ 1996.256211] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1996.261377] RIP: 0033:0x45e219 05:05:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES64=r0]) [ 1996.264578] RSP: 002b:00007f955d047c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1996.272262] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1996.279545] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1996.286793] RBP: 00007f955d047ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.294037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1996.301284] R13: 00007ffdb0e9697f R14: 00007f955d0489c0 R15: 000000000119bf8c 05:05:06 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 1996.415409] cramfs: wrong magic [ 1996.561985] audit: type=1804 audit(1609823106.200:8840): pid=586 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1713/bus" dev="sda1" ino=15774 res=1 [ 1996.624044] audit: type=1804 audit(1609823106.250:8841): pid=587 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1713/bus" dev="sda1" ino=15774 res=1 05:05:06 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:06 executing program 1 (fault-call:2 fault-nth:5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:06 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) mknod(&(0x7f0000000040)='./bus\x00', 0x80, 0x9) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x492400) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 05:05:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x1f, 0xa, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x9, 0x6, 0xa62edc96d662e858, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000400000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="8c29aa8a04afb39a76c94e1295c39dfb57c041079894498039c5852703dc3c3d7eb9989c20675ab3ba5e18ffa56e3a211caf2efb01dc205b1f529720eacba215d28028b4f316"], 0x1c}}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) sendto$ax25(r5, &(0x7f00000003c0)="ce7868cd866a133344930ff3cb012caa41f538824d5b022a9d7a40c5292350fbb8e1066f9568b6ec73ec03279f490759ac7aa819090e3df2b4287eacc5465c260e52b2a03a024546684796882248b984d395983c0ff4ee5054836dcbdf7838d518945c34ffe18b54eb926d7c9d810bf18043f7e41196e021fcd814b925a19411e4dc1ef68ba189eaff60b0bc11271e3c8406e38df196e3c9b33d8b7622c7a29d69a943351208e8a9688fd852225d62a06c6e02716809aac8be43431a17890f9a6f5b5d1145ec6324e639fd745d63aa6ee06b68593c8b74164c22a9a3d5b8", 0xde, 0x20000000, 0x0, 0x0) 05:05:06 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000003340)='./file0\x00', 0x20002, 0x11a) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f00000034c0), 0x4) r3 = socket(0x11, 0x800000003, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000003c00)) r4 = open(&(0x7f0000003c40)='./file0\x00', 0x10001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x14, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="762037c769893e385ed28ed55dce561694eeb25b26ff7ddbb44f8ba282334a8ce94880835131c0b5d86eb77f1d8b52a33ee30a70b8568d3e7b89f7f6ba666d93ba45ff1bca74bdba210065df2ab790ba88915cc6c375186f7d0e89fb63e87da52a70337fa631fc2807c6d3fa1f13a75968b58a69ed2e8fdf7fd9f26a29bbc0731a4ed8565e7474c3089c65130334f73adb2dc9c3da5f779acb2435e527fa92e38d487b830fb3673bf637665fcde3ecb63907ffee040fbd762b808ad428fdda699177c8711e35c87179f6a9786cccb57f9e3b2e2a", 0xd4}, {&(0x7f0000000200)="d904217515cd99b26e76717785b7cf9d6f6f91666d5479e71d73a1865c1616fd658c8ce8f6410cfdd9aa4653f3de73634130cf92930f9dbcf72fce6e5a2a43ead60253adddbe3aacf07567a867337267ccd6f509198c1e19b0431c94c9194714d891ec1e1c8430e45f494836c7be16a50ec5f001cd95b22df5da9a5f26f968fc829db4eaf9f44be8da4b28665774fc7cf17c5f2102692703a2d4d538275be37b4cfc0f41d94ca49a5b4ad25f3d64578052ae9ae400c9040c74540d", 0xbb}, {&(0x7f0000000140)="8cb9d0d5566dd75e1cd6015a8f1e7658af23c536", 0x14}, {&(0x7f00000002c0)="637d3611c78debec967c8d16c60f18be00d27690f959f66df4d518c32f8d8286b60b1460e344a99191d0da33763a7228218e5025bd5b0088e7dcbf5042092f87c3e307e2b21281ff784791f75da68ab7f0b26c0edb7ee7b501e814e7243079f2d9714b11858fbe438af09efc37277cc49babff57c423d9b037297f1d178f989cdafd845c6fb21be2ce93207dc248a67f8881654fc54b588eadc4bfde6c648f927e0864ed643688a9248e5d96c28e9ea9df0487a3151162c8b037a15b542c8a47c74a617cc9fd838d57f1d830410802a435b3b4edea54", 0xd6}, {&(0x7f00000003c0)="1b9854bbb48f5f649e47d93e55431893f196fbdba5919e673798c6ba5428d6d3d146dbd13b35978eefd65f92b656e2eb701ea0d4c0bbedbfe0226182fa0c921e93a595dd990938d1a72cdf4684c3e49b84b4979c22f7ac42", 0x58}, {&(0x7f0000000180)="afbb9b08060594e3d0dc4e755c19c92c52871edbe85f778a7577ef568255c7942a2d9590b2e082872fc305579add68", 0x2f}, {&(0x7f0000000440)="6decc4bf5e3f68ae04a1f0b4dadd894e01dd78526218f3e09fe990502b9d92f24d70e0f203843e8ca465358c6cfbcee738d2b26b028f0e29b5fbf96f9fd8f04ca86fa5aa294c6a555ad09e7be20e33b72a661d88cf8e665421ad469cfcb772846b8d0b9b0ea4ae02094882743bd7e37165b7ffbebdaf264a218ec24e63f7097e1d72d26cf42941d9d0138f49fe9121741d022e39005becdd722651942c7261197b223fcf53e490bb342ae277c92287f90ecadf67629b00f5c22415c282f736bb21687599e0a1a41e7255dc6c0377b1a5c1283b1bd662318122c1b1", 0xdb}], 0x7, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x84c6}}], 0x18}}, {{&(0x7f0000000600)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000640)="678f21161a2c0d40f749964782062a106e62ff0c4961c1dd838eccea34bbac0414be2233df92ae5286d9526508c078e075e8f8937a354c9f43458e6e1367493c6e1f0d4fe6b01a4362603699e1a6ae657d7a57d701aa57b9914d7ce3473442ea8d679ef1fab457bc8407b5e218bc5946f3c0da4b34a3b68ab82533479ee34606d0aa8aff53334b1f3b80f7cdcaaa10279e2943620dcb37914a608ed06c4e1cf43662c8aa1e42908cd0c2e98a86512bd9384284c4e12b5ae0", 0xb8}, {&(0x7f0000000700)="1a03fc7444f392200b8665bbb798a3a3", 0x10}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="980000000000000000000000070000008619000000010111d7f4244541ccf4bd5519d117b207c3070244445291ac1414bb00000000ac1414bbefffffff7f00000100006b02ac1414230000000264010101ffff80000000000000000800ffffffff000000097f00000100000004892bbce0000002e00000027f000001ac1414bb0a010102e00000010000000000000000e0000001000000001400000000000000000000000100000018000000000000001c010000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414bb6401010200000000140000000000000000000000020000000100000000000000"], 0xe8}}, {{&(0x7f0000000880)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002ac0)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="475c9f31d543b422388d02f4d286d0e2f7df731dd5fc65286eba3858e2056d7f59a6e83df17b632fae4b9ccf68129f5f3e654b873e6c6e084a81de8a31f8d1e1c10f33c0ce0f66afe61c3ece7460bbc24d2a61420961d43b3f30c355ac3b4165e8e8a51d0c7d18735ef821892bd74a8acec91faed1ac3899978a8e4933d445da48ea590d6b0bfade6623f95e51562480844ce3b87417304790482692f154092bedb6eb623a466663b6e00ab750aa5d24e221c969232a182cd1ba11f4dff37ba7f2135526abb805ee30b0", 0xca}, {&(0x7f00000019c0)="970e6eb3aa24eaf16785fff6dbaa1b55cca27a4ad82679e5ad5698a50bbdc282490d94c527330957588bb8e50062fbb6f8a301b2a94479a008129cab25460a8bf29b6f7953078ef11d4afc2cbdac03663700cb8f627df4885eb386daed927afaf9bb3e5af650d47adb8ffcaced9e9ee27f96ae8ccfb0de95710f6f13847b05cd19083f0fabb963e6543f41faecd23521b4b6bf18b16b132c8dd1ab35b0f7c6bb5e5b9396b9ea3c6682c4a06e46e5a5ed004afa082d3b77a48e75bc1abf730f104cd1e5b9a69cc3733734e0e0b4fc4a", 0xcf}, {&(0x7f0000001ac0)="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", 0x1000}], 0x4}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000002b00)="b09d3335921f278f205f0a3a5595459f5fef4a5a254b39fc4e6ec705323ad864dc76c017075a19edbb317c8d2e27f6e8779a6c22bc43e242f9fd9af49e8b4ccf850cf59c5d909181a58a64a2da7c11102d41a7466e95ca485d9ad6116e79761f9ec07ef52d7545b5c58e94ce6464bc74837878c345e4328f1c7c39b57691b700656a3bf854cfae8ab7b09509bc38e86552d3d7ac39923c9d23477a4660061d985477d348eb23726235a012a22cec5d1fdf7dc3273f76c783f9c618b3b8ec71d980df417fc16037", 0xc7}, {&(0x7f0000002c00)="7fceca643d55c93c5db18adc350faf46346e5b4e3fb446a2507a94e472d37ce40a76c28a8b72e3a4bb26c2b6db9f0c98f50af6a2e42c21ca9e169266c5ef975f9b44e4eee26c945a08c45c2c20da858f72b30b6bbf0200a51eee7fab84abb049793fe2dcc20f02eae508d6c2096c769ab904549905439e746412f9ee65794fa41ad4085972abf7df6ea61a4a53702abd01db8f26ed7ec43440395a9a21c1f0dcefba67fbbe7de589e69b992bce956be5e5a516986c06eca86d911dbf0d1988488c6f176ac4800dfc4ce5674eedfe10655c8de09fea7c99d6d9e4601d6e4844", 0xdf}, {&(0x7f0000002d00)="d94f747a7edc4d43", 0x8}], 0x3, &(0x7f0000002d80)=[@ip_retopts={{0x34, 0x0, 0x7, {[@generic={0x7, 0xd, "0e499fdaea6d80ca1a9a64"}, @timestamp_prespec={0x44, 0x14, 0xb7, 0x3, 0x6, [{@rand_addr=0x64010102, 0x5a8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @remote}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002e40)="4349e328739826f07501a4fb26ec70746c084b469560a4f70fa3b021fa76e25a0fd0cba056e6a99c0e3c00202b3e134c12e1f4da1ada3c05306ffb9e7e27185515f5367a550ba5b97136a4c66cb25b8f1e6dc6da40269570c2255a16acd0c7f50e612c5e2cafe6fc59b5430ebd0ae8c422a86eaefa555de382ed26474e35344d94ee7ccfede08a59d3ce0f0a7dbdda4bb7e6d2be727e2cfa9cbdfe5b7965c1a22716343fc5bfc6e546f4f52ddb4e6657ca3dcdd4a958b4816262b9daf1c753964a688aa9e93e9af74fa32018c1f63568a4692a9c33d24d6e07806ad29a28c4bc08af77f0fbda6a4308ad43", 0xeb}, {&(0x7f0000002f40)="3bf34d04bd1eee43ebddd8a8591f912592030866cbc6e60fd97a371f79f7c915ff5942ef29a7bf11d363335e1a31e6d02515c999860da7d9c927f043ecc24d2158539a6f4e8ad3e2a6607b4508aad703e3cff039c224bc0375524c5cd965d43e9356d67b646d01cb037eaf242f787c69f0516cbeff6416f8dfea1144e0629f50854186b0c78a738713b0b9999a8036af6a3054641feab2a9096f3603b770f640dcdf08ae39511dec5166fc50c3fb737c766379076007e0c08dc13e01bb20efa45115f932ee817e391a2e6070935f02700a0a7f1dbf9b5bc6163c77d2cbc166921b7a61a0736a99f85d9def2f7d1131dae228f7dfdc9cb891df", 0xf9}], 0x2, &(0x7f0000003080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}}, {{&(0x7f00000030c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000003140)=[{&(0x7f0000003100)="b3bb", 0x2}], 0x1, &(0x7f0000003180)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa0}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4265}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003200)="ff35a7c60fe01f781e4da8a4ab0c969a13e30607cc684bb7ba04aeff29598705a7a06220f9124232ec933b9a9f2f5f9b821d28612ad79fb9a4d80527bc797f53205565ecdd5c59b80594c4bbf0ee8dc265dbd981aa951152511d701c2421edba", 0x60}, {&(0x7f0000003280)="4afb7c11483f3ac5efaf3adf32a236970e96f2d43e288e5dc2a5c39ca01630aecf0c94d13fe2a12e753150e7981867f0b79a607726911b30653673e3a47f506aea352db2eeccb9f0b8a999299d1a1af79be0af69dd70604a2351316cfe39facf0c269a0eca9e4e1ae58c7c603fb6bb9b54864a278d459918b11deffd2a90063d2544e4c7f13f4094108d3e0a2ddca4823d8c62a2e4c5bd6a101d6a180fb8acc2f70cec8cdc0921c330c9f8a72f32995e6c82188f97691a2812e7b3bad963", 0xbe}, {&(0x7f0000003340)}, {&(0x7f0000003380)="09d6a8479adc0101e02439c5f52401780df9d2a21415d64fd8924b3327ba6cc6c96063e9d98af0d79a8507268b01a7f5dfc5ad6e8de3e0327984b3fd31d5450560dc2500167ca067f66491c9a219ecb5d46dfb3e3a41fb96b89876752b656d6e39ab2a5a614155e7cb199299", 0x6c}, {&(0x7f0000003400)="53d0a4f89a0d5f4294c7fbb7b776f820113eb004a34315f00c7e24b500d41b8a92d2d97e63f927e09de10e115ad37be85ea22f8d4d9c8a4d812ffaad77456f9fa26ed27f0fa8a6ca7d1b60a55fed6a7f7d160fc4d332e07e60908a93774830c301878c9a06ab4d0411d6ef43369db8ed03154f5fb5c8ae0c", 0x78}, {&(0x7f0000003480)="ea86a51f04cc6978c2b3a2d20a52e966c57d817ddc1f64ef5452d11b1d16e5c8", 0x20}, {&(0x7f00000034c0)}], 0x7, &(0x7f0000003d80)=[@ip_retopts={{0x48, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x28, 0x70, 0x0, 0xd, [0x81, 0x8000, 0x1, 0x8, 0x6, 0x4266a38a, 0x7fffffff, 0x3, 0xf8]}, @end, @end, @generic={0x82, 0xa, "a267a896dd6aa196"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@generic={0x94, 0x10, "30586468b48afced04faa3d43962"}, @ssrr={0x89, 0x27, 0x8a, [@multicast1, @private=0xa010101, @multicast1, @local, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, @remote, @multicast1]}, @lsrr={0x83, 0x7, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x6, [@dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010101, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xa0, 0x3, 0x0, [{@rand_addr=0x64010100, 0x46}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x400}, {@remote, 0x8}, {@loopback, 0x20}]}, @timestamp_addr={0x44, 0x24, 0x71, 0x1, 0x3, [{@remote, 0x1019}, {@broadcast, 0x2}, {@empty, 0x1ff}, {@loopback, 0x401}]}]}}}], 0x128}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000036c0)="fc68d749e4d77d7387d2a88082712e98504dfbb8892e568039ce5553df5f38ccb5e2052ad368ac24012b71e4c9485bbcd6c42d6918740abdacb4b97a296509e7910cc9ce8776fa8bdc07b25c2e", 0x4d}, {&(0x7f0000003740)="801ef059f606d3f6976b", 0xa}, {&(0x7f0000003780)="ada0050fa8106a4f885c379d68ccf90f580e8619e8070140cd4ad9af0ecabfaab58dd0855e3489d2b08bee924846f2072bf9469efb2d11837caa0e54838d565f4d3ac7551a60205614d6823ff9b2434694e2c9993608b58b4ca4767b90e258b03c4bba5affabc4fa01c3360d547b4905820734664ce29ca1eac73b4f0a9c4eabae05f0848349bb7929", 0x89}, {&(0x7f0000003840)="ee21aad33a634f780ddb1a9d5e4a84904873236e248fbb03a943e6b243c06c2f22c336341a6c0c6c003540c2a78b1f46922492e747eeaf162d6d5fa8de80279c56e53a1c01652e97d466086e061ed067512f267fd77738eb54e27aa3886dc846b02bf31e7e558432fee77e88cb34d48b2d57892c5bdd7c75a13e04876357ed9111e775c21467699f30a5d0cfd9ad86a7a10ddb8fd60ad13b7507a969e963284450a5e3966a8d2dd38a85469a8402a2c954f14f1386aa7041182c8676ec31350b418887f933879dd25f8dc37d77349ee842a478882994dd1ac609dac129b9b7aa82a22170565c3c", 0xe7}, {&(0x7f0000003940)="32f58852b695344213a9adff8a0fa72c66ada1df0834dd6e32d1fc0bfe3f662959eeb852dbe0", 0x26}], 0x5}}], 0x8, 0x4880) 05:05:06 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x460402, 0x0) statx(r1, &(0x7f0000000200)='./file0\x00', 0x6000, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r3 = socket$packet(0x11, 0x3, 0x300) delete_module(&(0x7f00000000c0)='\x00', 0x200) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000000)) [ 1997.353709] cramfs: wrong magic [ 1997.364188] FAULT_INJECTION: forcing a failure. [ 1997.364188] name failslab, interval 1, probability 0, space 0, times 0 [ 1997.392955] CPU: 0 PID: 605 Comm: syz-executor.1 Not tainted 4.14.213-syzkaller #0 [ 1997.400683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1997.410038] Call Trace: [ 1997.412624] dump_stack+0x1b2/0x283 [ 1997.416259] should_fail.cold+0x10a/0x154 [ 1997.419475] cramfs: wrong magic [ 1997.420404] should_failslab+0xd6/0x130 [ 1997.427630] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1997.432736] __kmalloc_node_track_caller+0x38/0x70 [ 1997.437663] __alloc_skb+0x96/0x510 [ 1997.441291] netlink_dump+0x21b/0xad0 [ 1997.445096] __netlink_dump_start+0x4e2/0x740 [ 1997.449593] ? genl_lock_dumpit+0x90/0x90 05:05:07 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="61756469742c646f6e1a45070da1c0083c89745f"]) [ 1997.453742] genl_family_rcv_msg+0x95c/0xb20 [ 1997.458151] ? __lock_acquire+0x5fc/0x3f20 [ 1997.462384] ? genl_rcv+0x40/0x40 [ 1997.465837] ? genl_lock_dumpit+0x90/0x90 [ 1997.469980] ? genl_lock_done+0xc0/0xc0 [ 1997.473969] ? genl_unlock+0x20/0x20 [ 1997.477684] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1997.482697] ? __dev_queue_xmit+0xc96/0x2480 [ 1997.487116] ? __local_bh_enable_ip+0xc1/0x170 [ 1997.491700] ? __dev_queue_xmit+0xcd6/0x2480 [ 1997.496110] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1997.500703] genl_rcv_msg+0xaf/0x140 05:05:07 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x200000) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x2e) [ 1997.504418] netlink_rcv_skb+0x125/0x390 [ 1997.508477] ? genl_family_rcv_msg+0xb20/0xb20 [ 1997.513060] ? netlink_ack+0x9a0/0x9a0 [ 1997.517036] ? lock_acquire+0x170/0x3f0 [ 1997.521018] genl_rcv+0x24/0x40 [ 1997.524297] netlink_unicast+0x437/0x610 [ 1997.528362] ? netlink_sendskb+0xd0/0xd0 [ 1997.532421] ? __check_object_size+0x179/0x22c [ 1997.537022] netlink_sendmsg+0x62e/0xb80 [ 1997.542004] ? nlmsg_notify+0x170/0x170 [ 1997.545983] ? kernel_recvmsg+0x210/0x210 05:05:07 executing program 0: r0 = socket(0x8, 0x6, 0x7f) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d01, &(0x7f00000000c0)=0x1) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0x6c, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20000824}, 0x48000) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'wg2\x00', {0x2, 0x0, @multicast2}}) [ 1997.550136] ? security_socket_sendmsg+0x83/0xb0 [ 1997.554903] ? nlmsg_notify+0x170/0x170 [ 1997.558883] sock_sendmsg+0xb5/0x100 [ 1997.562597] ___sys_sendmsg+0x6c8/0x800 [ 1997.566569] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1997.571328] ? perf_trace_lock_acquire+0x510/0x510 [ 1997.576263] ? check_preemption_disabled+0x35/0x240 [ 1997.581279] ? __fget+0x1fe/0x360 [ 1997.584734] ? lock_acquire+0x170/0x3f0 [ 1997.588708] ? lock_downgrade+0x740/0x740 [ 1997.592860] ? __fget+0x225/0x360 [ 1997.596319] ? __fdget+0x196/0x1f0 [ 1997.599864] ? sockfd_lookup_light+0xb2/0x160 05:05:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) setuid(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0xfd04) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000340)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC=r2, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRES32=r3, @ANYRES32=r1]) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000500), 0x0, &(0x7f0000000000)) [ 1997.604362] __sys_sendmsg+0xa3/0x120 [ 1997.608178] ? SyS_shutdown+0x160/0x160 [ 1997.612151] ? wait_for_completion_io+0x10/0x10 [ 1997.616831] ? SyS_read+0x210/0x210 [ 1997.620455] ? SyS_clock_settime+0x1a0/0x1a0 [ 1997.624867] SyS_sendmsg+0x27/0x40 [ 1997.628406] ? __sys_sendmsg+0x120/0x120 [ 1997.632471] do_syscall_64+0x1d5/0x640 [ 1997.636367] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1997.642117] RIP: 0033:0x45e219 [ 1997.645301] RSP: 002b:00007f955d047c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:05:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x448c0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = epoll_create1(0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0xb00, 0x70bd2b, 0x25dfdbfd, {0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40880) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vhost-net\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000001140)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1997.653007] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1997.660272] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 1997.667538] RBP: 00007f955d047ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1997.674803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1997.682070] R13: 00007ffdb0e9697f R14: 00007f955d0489c0 R15: 000000000119bf8c 05:05:07 executing program 0: ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000004c0)={0x1}) syz_mount_image$affs(&(0x7f0000000000)='affs\x00', &(0x7f0000000040)='./bus\x00', 0x1, 0x4, &(0x7f0000000340)=[{&(0x7f0000000080)="69d12f54da8eac298edb07d9aa47e1519bbcef420dc7bd6724f796248d574d4e4358f6201c1b6266019acf5a1a499ebc0bb8f6a6b7508325f86c82a5074cffe3c9cdaf766ed46c0af7b35b2e78dfa9d66f0b4ca3b90a8f87452b04cb6f6fa08a97b0bd1444da94aa1b4217d54fbe5e71490746515be5af144be61868953e614d927b44f62ab3ddad138da2527d2fcacf5e3d9c36490181e7171c989cded637fb2e1eee776debd9185e03d667b40a2a28eaeb4f1f06f7a60276dd40f82b99c545047c555342b8042749fd149cc1e7b31d8bd9b484bc0b9cb21a6f1162f26f294703cd0feaa1f146cec7f9251e14", 0xed}, {&(0x7f0000000180)="621939d02a4543a4b54fbc873f9e25a09149bd94c7a2ab1b75d0274e0a189f56ee050f9f70b4e828b96605fa55bc75e7f1213067bc844300eb9ab2545d37eecea47421f0a181215ba4b1fccaed44e45e57e6bc7d9a30f691338dc69af8fe720e019b1d17814f3e42a78f190d1c1cffb97d9a38fecfcdf279ab943b406ff9495b325c46c6cbbb89ea50bfc7", 0x8b, 0x81}, {&(0x7f0000000680)="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", 0x1000, 0x6}, {&(0x7f0000000280)="f74114eb4e0394", 0x7, 0xffffffffc63161cd}], 0x40000, &(0x7f0000001680)=ANY=[@ANYBLOB="6372616d6673002c212c6372616d6673002c6372616d6673002c6372616d6673002c6372616d6673002c7375626a5f757365723d6372616d6673002c66736f6e746578743d73797361646d5f752c7569643c00db00078a1ca7022df669f86d4d9ba76d58a0c87aa73bd30888dd56180655ad7f6163233921", @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d7be22c7065726d69745f646972656374696f2c686173682c00"]) stat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000540)) removexattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000480)=@known='user.incfs.id\x00') syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 1997.840957] cramfs: wrong magic [ 1997.932397] cramfs: wrong magic [ 1997.959716] audit: type=1804 audit(1609823107.600:8842): pid=677 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1714/bus" dev="sda1" ino=17090 res=1 [ 1998.035236] audit: type=1804 audit(1609823107.650:8843): pid=681 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1714/bus" dev="sda1" ino=17090 res=1 05:05:08 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1ff}, @NL80211_ATTR_VENDOR_DATA={0x5, 0xc5, "a4"}, @NL80211_ATTR_VENDOR_DATA={0x26, 0xc5, "157fe5fb9caea3774cf41f1720a85e5cf9ec80e42bd1419a1ca79b9cad6f018b7c5e"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}]}, 0x70}}, 0x44004040) gettid() r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x40107447, 0x20000000) 05:05:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x701000) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000006c0)=""/4096) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0xfd04) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="b4e93b9b2ffa8c00cbb7bb9cc72436e58c61dce8fe04b8417815bc85efe9e50c84cc068b52a1c6bb8c7bc65ab820fa08de23e3368efcc6dedc836956acd0cc5ef19ab8461f146d778c96e9e24937e643f9acae135e36a7f684ea673b0c7a778200761551e81ba8674e6b639465b31f56f247eb13a13b934d8092bd980c845a5145280b671f2f28902ca5c52577e9f294c4bb24fddd38e05280578e550b71c17d1781a8433efc5813bd2ccd7aa5275b1eb8e06ae29613b2e6d73735779e059198600566", @ANYRES16=r3, @ANYBLOB="510700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="96d265706c7f0fbc5bace9e9dd27328ea7d528ee07b693fabf1011efe73da83d4a04d7962bdd36da7cda7796df0efd363d891b919a5c4dde9bb183f7edff6d3274e34ac5c3e3e0302718069afa8257c7fea79e1a4047409d78866ebf7fc9256c1d9cac51979888d7"], 0x1c}}, 0x0) 05:05:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x800, 0x20, 0x2, 0x3, 0x2, [0x3, 0x20, 0x6, 0x9]}) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) 05:05:08 executing program 1 (fault-call:2 fault-nth:6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:08 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="03"]) r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0)='ethtool\x00') r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000002c0), 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='!$])\xfe\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x0, 0x1a4d2c5a, 0x25dfdc02, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xa5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0x284080, 0x0) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f0000000540)={0x1c3, 0x1, &(0x7f0000000680)="f13065078b46bc06187beb10f79dce8f0e1ddb6580e989fdfada4f2fc73cc1e6299a52b3cc02c0160b3891454e5e7caf63a82c03ad3c015165eb782e74be8f413ecb189f81b2988de73b3e30f598bdd6ce6ae03e7465b17e0bc90c2ee5478df97926180a570c64ecf04bbaf5544dd65814e08ef82f9f71d36e75e269f96645fb80629398cdde570130061e6e2f385d01adc00deea7709e78ca77e22aa82566238a222ef4b53f4d8f95d172bdcfcf2d8a27d0f63afe24e2ce714e12bc72ab5b8545b0e5b77949680e94d31ed802e5df6d742d16213e40dcf8e9bb8ba1e4b34f9e6d2b0b4573c2a886e6390df0397348975702642686ea6d47b433ae78b6c1d2bc7464bc59f03b4c8a6f083104ad833e6e0ab9f320539768213f8bb87d6cd0be8e6b942e2105ccf7840c212b896812931f6eaae09ed7c47bd5675e1103ecada518171b9520cda255aa160c5167eead1f64426741d1b3a709ba1d11327dce847293738567a454fcf8f894ddedfad66aede64088d91c039a369152b91d96255d852b36f3d69ed2488bdc8db56e5ded37c81db242138b008e51dfe1da2f1ae4d692efc46f1b9c6c551bf63586c8afedf5c1772344a0c7d466cf14306ab29ce2374601905f64a76665801dca2879c1e1c3e9661603efde4c2b4c0a0ed213c08f5deac239cdd41bdf563b58f119d3c23329740e3dc118654ce5c7b85e6f0e0c4074dad228ca20c54be092a428cba20e095be1f4e13a29d5ec5bc0774085a7f9693c80efb891126836579e8e3bc7516dc85468aeca4214946b53ea58c911cfe473e173c9d1b9278bb5d15dcd6f3d36d85e1504ecfbf352dde648a785fd60db41e4eeaa1194a76ecc186fad213508212a1a9d1381b14eeae78ddefaf2d3e30db53798501781923ca51ec4b041c9e3ff6bf5a20de8d363f784dad39af1c806e3e31b7c7906e9cae2953d991b391b1f0b25b2a2ac6159a4ae90021ed427bf41b5aef67bef3a9d3c4ff7d43853bf60eb5f06e9b98f5ae11e579346d739ef93ac92732727bf69c9aa9bbdbca42c7d102c4043f8ec5e988347bc7b8c7dce05d0d4437be79a4dfe306cb5cda499745c89d02cdedb6eff02a31e041fea2eaf04f23a8814b964e026a5c6f1a31f5469544b5e5da9df48aaf41dceb250a8134f8749c769362018f2d6d9d688885713dad091d7020957bb79cacb35dfad75231912011db6ed9930d27950b84c421832d2168e2e6588c5235cb5cb88c7c2648191ecacee858dfad92b7f16e070f0b384620714ff6d75c7cbb8bfc16131146a9a9a18a0dbe7eb199aba24046884c4272f7eb1fe196ed2913be0bb6e2a9c953c4653384a4d9dd9a9253520e6c049028dfa176804ad3c8c18e4612fc3765853920acaa5797d8284646ee4c64eb8bd29dcd2b3c7a4020a7fabef4571acdc359c4b0d830d574046251a8adb22"}) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0xfd04) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000580)={0x2, 'ip6gretap0\x00', {0x81}, 0xf1a}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="30000180140002006272696467655f736c6176655f3000000800030006000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0c00028008000200fdffffff48000180140002007663616e30000000000000000000000008000300040000001400020076657468315f746f5f627269646765001400020077673200"/84], 0xf4}, 0x1, 0x0, 0x0, 0x4800}, 0x10) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f00000001c0)) 05:05:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0xa, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}, @IPSET_ATTR_SKBMARK={0xc}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x4000054) [ 1998.813397] cramfs: wrong magic 05:05:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f000000d8f150113d978ac720f917fc07a8130bf0f6db6907fc0dc180840aabac22c6f18d7402734ccbe7228ede274395bdf903d8d7656f9ddecc82d1fdd1ff1f7745ff826ecc3fb419eb74ff2dd9baac1db7d9deabc307651e1ae365d0ce254349dc", @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:05:08 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000000)={0x9, "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"}) 05:05:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000)=0x17, 0x4) [ 1998.913694] cramfs: wrong magic 05:05:08 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x8000000, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000040)={[], [{@measure='measure'}]}) 05:05:08 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x59a7, 0x8004, 0x3, 0x7fff}, &(0x7f0000000040)=0x10) [ 1999.095201] cramfs: wrong magic [ 1999.155509] cramfs: wrong magic [ 1999.273638] audit: type=1804 audit(1609823108.910:8844): pid=761 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1715/bus" dev="sda1" ino=15774 res=1 [ 1999.358782] audit: type=1804 audit(1609823108.980:8845): pid=762 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1715/bus" dev="sda1" ino=15774 res=1 05:05:09 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') gettid() sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:09 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x2}) 05:05:09 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$sndseq(r2, &(0x7f00000000c0)=[{0x2, 0x2, 0x3, 0xf8, @tick=0x10001, {0xff, 0xf8}, {0x5, 0x9}, @quote={{0x9, 0x26}, 0x0, &(0x7f0000000000)={0x21, 0x6, 0xf7, 0x2, @time={0x2000000, 0x5}, {0x1f, 0x2}, {0x43, 0x8}, @addr={0x20}}}}, {0x81, 0x8, 0x3f, 0x4, @time={0x8000, 0x9}, {0x6, 0x6}, {0x7, 0x1}, @result={0x10001, 0x2}}, {0x6, 0x3, 0x8e, 0x2, @time={0x5, 0x2}, {0x3f, 0x7f}, {0x40, 0x3f}, @raw8={"80ba8c7ba43d02f71b6248fd"}}, {0x4, 0x1, 0x85, 0xa1, @time={0x1, 0x2}, {0x0, 0x6}, {0x6, 0x2}, @raw32={[0x401, 0x0, 0x4]}}, {0x0, 0x0, 0x7f, 0x1, @tick=0x8, {0xff, 0x5}, {0x80, 0x2}, @raw8={"5535034bab061b124b5ff1d4"}}], 0x8c) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x25, 0x5, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) connect$pptp(r6, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r8 = socket(0x25, 0x5, 0x0) connect$pptp(r8, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @private=0xa010102}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x74}}, 0x880) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000580)={0x6c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8a3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x63}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000070) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="1107006b000000000000010000a3c6ff0700", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB=' z\x00\x00', @ANYRES16=r9, @ANYBLOB="110727bd7000000000000900000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) 05:05:09 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) syz_mount_image$v7(&(0x7f0000000000)='v7\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="ef885e7a405d33a45f1281b12660b1c34ff1fdd44a6d4754397a7de96e2ccc9789ddfa8e4618c4d6a6c996ae09a6b41167c99d00a65d95ab6b1cb58f32c7113eb1237c78e742d85143167c75972df6aeaa283d172dd7738cf251d173eaa134b6828c4bf873e40123f2bb48ec1ee475c08e47d29ac1acee6310fbe91423e9fa61ec57100a335c7a", 0x87, 0x78e9ec41}], 0x120000, &(0x7f0000000180)={[{']!^@'}], [{@hash='hash'}, {@obj_user={'obj_user', 0x3d, '\xb5*#]*^$#@{@&[,\\}'}}]}) 05:05:09 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) r0 = syz_open_pts(0xffffffffffffffff, 0x20402) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) [ 2000.152252] cramfs: wrong magic 05:05:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42}, 0x3}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="6a9bf6b25913771c52f35754492b773cdfd4292f5af973b25642c9a961ffddd25435daaf56b4583693d23007e8f24ae1371f0ced23283e523de50dc6a1e38ed79f302e", 0x43}], 0x1, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}, 0x8000) r1 = socket(0x25, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000400)={0x0, r3}) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:removable_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r4 = socket(0x25, 0x5, 0x0) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x801) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r5, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000002400090f000000002000000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000000c0002000800060000000000"], 0x40}}, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) syz_mount_image$squashfs(&(0x7f0000000240)='squashfs\x00', &(0x7f00000002c0)='./file0\x00', 0x40, 0x5, &(0x7f00000018c0)=[{&(0x7f0000000300)="d029f97fad097353fb659e73dbc91a730ffcd0f6", 0x14, 0x81}, {&(0x7f0000000400)="d3d06443613e2cc80fcbee054c41139f7328d172f18d2090a868e467f68c09f01011636102e2fbf0383d18fdb667e4be2e8754b182d6b3888c197bdefb8de502a970f88af250b54a284fbbf71f7086", 0x4f}, {&(0x7f0000000480)="b2c0e8bc8ecd281d73218d89ac772690e1c8da809e4c10008e6ffe047c8510a08d19c8ac5ab8f77362ed256c5113b73279e6ad75d879e741655d6384669372f0c1d4b1dd455190b08f7ea92c6036de7dee615686d6e4992f9e6bed7b1023c47c75841e50", 0x64, 0x8}, {&(0x7f0000000840)="af63888d02c31d92a993e293b3d093bc34fa21f6517446ee1c27ab149b9a7a4f53c92789f691294b939ce0941e3999f03ef52dfa25e620ca09efe1102eca88a37a9163316a592e7aab19e695c0c28d3be8bbf02ff4e8af9cdc8d2280f228ad596af99178255addbe70a174193e05cbb1f380c812bc83", 0x76, 0x100}, {&(0x7f00000008c0)="f02ba87d74fa08c8add5bfe99f0a59f90f1f513006e225531256421aac6d43e47ebef412f5c3caac068878a50906d1775cd57bd201413be7d755a19b63b0ac279091af6ae17cbf8e2901f8f8f4efbad2da4c12d6f5bf004cb5271acf64b6ec35f3e155ad6e36f7b7d5580bc2048c994d671e6b61c8253cb60fc5c27d34440b2d82ab1f84661ffb33b7b767ffe254559aef7301806c54703c8dacf2c17e167f4d31d8ac16e94a61bece85085ddcc40cd9570b5e30c7ebdc87f5a3ca74694c24d9486248570c04ccc85f67f126743abf39bcec63832bf64ae256f8f3da5301b96cd487e6a38c32c7b2dbd97b5231f84a5a332b8965a64b856181c7d714f98dd12ed1c5c4a9c1926a8c540429f96ec831760d643ba54e6b9527c98ba62f6ac35a2cca7362b36e32ab351f015c8f5cbf0cb60d4f31e6a015547214eaef6e3213f7e289c0377db5fd317424f0525802486edbafe543324094054ba8a4dff485d9f26342d3d70426aa0a299b701f3940eaffac244f64341121f7df73632533df78ae27d6149692f1aaee1636ae11d37ec3b40a31fe303025f439c3e0116f5e7344427a064187b8b3e63a1eb16525da03e473e2d1976b1e06aa1e129b14d7990e6c42b605b7423cadb64c330ecc8864a408b8115558850cd38289eb19d32d216aa28036e82075f185ef13dd8beadb868d239476a1cfa8ddf50078b5cf038490edcc7299aefd52125b3774d1f41da76b333327c16cc7f2becfa8b2349543e63a273851d5f09fc86d0fa7990fd2e2713cf02c509614856491a756e14711ad24dc81846c652106e0a90cfaf313e3b55f09ad38dea8d609894a3a38dfe3a3b8c0a8aeaf3b5f065762b72d495cb220678e7fffdfd302839403dde74cfe1d80de8bcba684ce7d6b196259f8dbcdfd68ec092f39b1ef0bfc51e698d42d91c56bd84a75832bea449ce06811ace48262c5d909634e2d161cc618187c78b432ef46cc358991ef1967c42644d955fd61f46ba6d6db25a8b9aad571190b62ea6c5cf8d049bca8b0353abd74dceb2cceb640a281d20f75bf3d70a9e9a1e245f62ca1897eab599c0c71c54e4de5912756be463ad7606154faa5c9a50c2d1afd37bf6974bf9211b8580c6f23b41effc29c70129c876a5b74e7720dc15422f4645a8af008c5bcc53da999251efb29f0c36f09bd218cff55d4ccdfa090aa6c87f4915c74dabaca58977e66b06d9ab34bdca4c433e7ccb12e70e02649c441fdb022c270263ec797f842590b9d76e547710f92811d1fdc6de78ab33adccd9dff026e4c4ee2e7585a3b43309379cb34cf9c9605a2b5b5be314cbdf206992adf13a8a6b22f2a07a4cd8f3d419159f09d1d3f2783ddce6065057673909c3eb6285b56fa4cddd55791dab654d4cf90be6b040ab55000a30b0aa4c87f5cba6638eea501e06692965111df4653b73943b231a254c87f14de06ae59ae3d10ef425db96beb3c46695a5a11716fce97b1ab81e849dbd04a6bcd35fc243719706962c8a8c1f1814b888ae6c9a8d4fdf51d5a2e3645a7e4773715dae34c4ae9d11f3af4c7d81ef13b24d8c0a61ded2146668e9ee3bdc7bf686251928226fe8cbe3fd2775f5883f38fd95a77ce07d867c1b516e88caf0d58bcd24308b003872593f02023da77efc8f1da93cb43b8ef6cf7185ce3ae460bfd615f32984762077321d96982557e09d475e9456e7566dffbf9510df18c9740f2036550929524cc6f104415edf37a048b25a05dadeb31acfa420e075719815332c84946c160c1146744dfcce1a504d83846156c7c558027f36aa15747a10052e662c957705b752e746ad4005ccaae1b08fb6f5aaa3c37ea9e5777b369a193c0e99d3ad40030ed97178842861d9af4acc53da7649e7fb9cce74eaa26d6a494eec0378b2a0bb9d91e943b66c644cf198b9e1019c093863ce9565a976e87da580074b0825eb0210871e8c7100b9bccfebaff7ed2d6102493de56992e6287965e1b1f64a275e2e1297cbfd9cf766b0a811367e2adda08c4754030beb90e1b4ccb3a5ed1aefc20cb998cbb4b98a9074f353b9d59d63aec639ff985d9d1460436a05aae99a9d0121fa3d7bf2242154eef3dba036229a317298e67267aaebafa34658a970d43c0391bd3bc5f351fdba5571cf0a080ab319e1c9c0445fbbdab00b1419adedafccb2aada23d19f904cb365a4aa604158cd0fc3debb27005c3c49e7909d59ee5cad0c0b0b2ab7b3a962edbc5f88e0cc6739266dbe7416be61801f222a5a9fcc6e1b26f42473929a2b5e3147ba6745452cedd3cebff2dd5ce7e18f8e723e10bb2ee206eed357af9469df427f3c59546dd0adc702190d609997391f4e4a7cf056a4c08d3345bac4fc0fbf60b4887e067a7ee883f8bb62771dc34fdadb1b2658b9ef888be550e5e1250f9aed5f46abd7682aa6ea23db8bad222da368cc416f4a3ffaa68bc13612cb8c5ac48a55cb993ea87f4209f19f80a9975382aa2fefc9577d5a531531bb0b4fb179ad19471242e7b72a00e03f10a3fb478910289eb631952ffb2437801230f251e6540007fba1610c7206a40918c9d376b06f658ce9b3ca969661e66200a5ac3b41ab1b8187e95fa3f4377bbf15daced8942ee485d182a56560c35f327ef4f854ab3faa6f6fbddf012325d08ef6a3ba3cbf9fc8514cd8cd61da93e39b2197397aacedae3a6022bdd7a0c995ca6d7d3d271f90696bbb4af3380b20b0d5eb8a75f4c1f902be8906d0caccfea888c0143fbf9e6d19b9f374817f3d2f94119a94a62d8a378ccc73c5076a45e8c0efb3e65b9aabe80882ef4df6df8e15a90abafa182e22d75028b7f167376d6bb8d4ff2b8c5e72733de0478d9f78cfdd602c896b7e469eca4342411637824b0aef5c95ce073b425b61e5fac8200296fc0d99c7ec68b4c219951bf260073283a9fa717faa9e9f7646976a1da69afb9983289e4694cbf798155e595889e9fd20c7e48f58731d5716e15e61ea316a23eff7d938eadbde20c65e746644db9aa0287ab518f2b344b43f6b3abe891d9b8ecdd5d0aaa2d8435a8973057cfbbd2a263eea57c24648a795b6f6c54ed7ba111a74acc4a0e51530e68a0d5cc8e49c175a61318e7f49f238e774d12b3d0928d34ee5f3e2dcfc52ae6b0ddfb4d42148b9ae5d00fe441467f19e1f19c5ff0a8480264c4cd79447638ab569fe6734ec33abd78d5527b2081b83af574225aaa5a8481bf7ea9efe9fc4178c0de327c66e4df81e6143c61b8ef089418669a56e6899c0170ac6f0304286f316c62fbaa891c2305aa9811fd925750e86582ae5d68b4ca001d91f6b20844b36e95400ac63035c4f0a4da374c82ef02c2f8a32454e22bff7445036099f8aa8248704303870a4c1e89424c036e9dce6235740feed3a97e9fb85d45ffad759e5153b083f73366fea2a1d8571eef974864ef3c9eeffef20c643b088255c6867e283e940d2785d28376e0551f06bea7bb3fdc5057e832e5b9a01782dc063fd644256e4171f408aeae839f664b672d970b69f6dfad62101bcfeba9432309c1feb5dd29e7bcd442621c86c20ffe2074511848a9a45c35a127fdf7bb7084e2b033c8e1045a859f0bea18673150aa0635f02df73b5f927ad2b3aefcd254df56550b0351e0389133619337ff4060fdba6a4269e119efedeb2a9f688a1be60529bdac33d93316da8539dd7f2741d6d81f46a5c1099b96c81f0f3f0a2d50ed7bdcffe339d36bae9dd8486545a32325f4f92af5d91d376e266163348c4d48f80225a0ec6459ae570d61aef9aaf1c7f3fced17a81e8848b71af9980dcfae5b390be10258e408dd709284848791ab364886cb4b4db7539aacaaf34529e925b4e0d2b2956c649e4c41379d4d7f9e63a39e2e2e956b0b8f6865f51ddc9a8767707dc456115b1b40118d100432cced714f98e99f2e25882e39985410c2be032e2d0ddc482fc6a426b14a7a29c4ebe8739dce886bd74f575658526c38709e784c55908ed8d6fb1b13a8185be0bce63f49e1a363c3979b8a1c32d1d4f0240adb3964052e76ffe17a1537b8d56039eed92603f138804a3f656dcea739352f936200e7bf7fc80842e639ca79c94585f31e8b13642add95efebceebd248f3bed2014714cf94f8fe53640a8a9a69d1ea805791f8e10a00b8f73d4cbe31056bca62c4aa0f59e9aff55b5b8d1d88c2e02aced1c05235715863f15aa6018195e666af8705f13aa920c3f5d0ffc3ddaf31fe9247726801e3415063ce9a125b300a47cb1f57c0e99edba334bc5e3feb5c2884da3c283fc79bb3ee59bf0b7cb07c0ff73e30297ad1eeaf26ad4ec6c346c0dae34535e3834d139aefeb0581770832ac0e7d8c00f67ad5c8421b75c698ca4675e71f2118b3a1f7bc6fe26412f3557b6cfc8bd1e98d05ad24c24c79b304eea6175340909d496325a2c8182923ba94ee778837e5959688d3e8b4122069c85447442048fb935092c6b5b9353a21985cf39bf834eff1dff3ba7fe89940cb077d05a986f6d242a8118aff3a68347ef977859470530a7378fd0ac7acebd1716399b73f4849890580e7783054b765f623e6a7d12034fb21aecd12713b9dc5c6549e59dd4bac53ab2ae534d4169c13086dea3f13668be0906a6b27832eb4bc7cf11fbcde04f1bce64abdd6b584c2bc04165ae5f535548998624ba89e0bd2619d7c0e35019788ea6772019c39fddd01e8736d3a0603cc6beac45600a906548952c3aea67f2cace12f9e25a86a334eaade2b8de722106e86919577f709188b22769f0359ad38eafd208276a4db4a4a7bb34c58ff68d5566fbdaa25ab55686c3fdb6e34bdb36271ab83641ff4ab380c6978bb348db7e298945023df6a9db0d548e23af43db082377dd19443b6511b72b6739cdb6e2ab361303747d6888ae0b47d6c36cfd8bf824a7a0e64b07e540611599f199ccee7d3aa4971c500b080733bf02f70ec2b2dc53ec00f86d8aaa760266bb1989d9218b04df3677bbedd32277aa79da2d7bb2a93bd1cd872746bdf7b6b017baef78a8640c89ccb40346dcc11df4fda8cd83b0fc30714dcced4a30b8f6679621e11f59bb11e8ddba21b21602fceddc5c6239f38994b3fd3eba797500cd5ee9cadf3b9ed4a4b03a2183d014b9ff0adeaca87b66cfd4c97c558312be562d7979f271c1351eb681378f27025cb8898103efa0c32e2ae0a3af30bbec09b416eedb6e4a0e1cb31ef71a1fd39e836c7aed2024201aa74d603b047f21b9cda7f15e73b37b560393c54210ad64167799e9526ba6242f2c16b44ff799a6d7950a20ad83700254760f767df109638993367267b21f460e0ee2fce3d99038cb569b6ad5c898c63882461b42f9f0240589340a1f1732e9e47180e828f9c7806bd179a5bf9a114286b2c7e9e3195d67c3c18cb4cdd64156537d3d0cace1db3b864c28376d673c134a95b44bf28c3a9e046dea9552cce0177ef404804cab7c0d6ef37fd42d64baf053606c379dba93e122bc504c952e0bb6ad2bdde07324d60eef2850e5cf4c344af7decc086e5fa1101cf37b8c47513ae5c1daad9d5d085798faa23a9898184ac341236af19f4fe490b67c6efcbc0b0658b200d77121e10c7a5a41c85718cfe902a24bae35d9546bfea24b466a28b863f916298233a74a3817b1db1c31949731361abc817da01aa9e46c3e1bce1e5466bbed9a9d2a2ea44308ae3d240d19e37568218c287c31f61796e29663ffe90967dc9140a5cdf86c4e3b9927406f6158e4e9cc8fb7a3eb9d77200909dcc17c73070ede7ed76f8ac964655d1422924ecf600e34c0a", 0x1000, 0x4}], 0x4, &(0x7f0000000340)={[{'bridge_slave_1\x00'}, {'+({&('}, {}, {'!&}'}, {'-.@#-'}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, '%,'}}]}) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x2f0, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf9, 0x5, "508b876910797a3f166f600d65355927868f2073cb3c41e134d8c30817cc7b80416ab922b9d1392bcf7cda94832d0400d8ad1dc6fa1d5e01ffb6851dac4015aae415a97edaf2ac3c86e336973f331fb898a1f5dc430d21a17b3c30c0173b2337bb7b36e44da01061223f49e94237e7acdf94d1d5256479ba0d42203763648421a3584acf298737d1bfdb162a45e383949fac76ed4dfbabf838552cf6d24d48b86ff187bc1e28d17da13d56ade7edc0ef6ccf27d15a44733d6089bd80fd2011dfc70d9a2bc1abf89897ff0d7846407ea372e1d019512773be488cabc4aaa56f13d1ed63620d1fc39b8fe3faa0814f42718d760def25"}, @ETHTOOL_A_BITSET_VALUE={0x63, 0x4, "ba5c5f9c84a694f5c9b46b8c60926a78b16f001170ad04f7a7562b20ac6689877da520fcfc93ec3d49bb8a2a9d925bc166b3c8f13e8c3ddcfa2f029deda147ac9d1501343f7b995128f8c5eedba71dbee3b80ac9cf08e9249437d47ea6af8c"}]}, @ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xe7fe}, @ETHTOOL_A_EEE_MODES_OURS={0x90, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "f35eb44dd25e34fe05b672e465f945a0bb173cdeb4033b47f2268a1aab050f7a21fc169fac992093abed5b6b1e"}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "f84670ec27a684e108ced3cf7aa5f7ebceaacf967dd146dac407f500a62e7cb2fce9bde9753f019147bec8ae6e3ba650aadb8e17bea374435b7fbe32"}, @ETHTOOL_A_BITSET_VALUE={0x15, 0x4, "6ca9fd521de3c66d787019492d9b83cb7d"}]}, @ETHTOOL_A_EEE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r10, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) [ 2000.236091] cramfs: wrong magic 05:05:09 executing program 5: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x101) syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x1, 0x50140) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000140)={0x0, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$CHAR_RAW_GETSIZE(r1, 0x1260, &(0x7f0000000000)) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendto$isdn(r2, &(0x7f0000001140)=ANY=[@ANYBLOB="d254000002000000b55ad474df1ab0725625c910baaf520bad8e8f6c2df46ac3fb6c8276ab733922275e135431ac94bdecbee7956c3609bac983d0f837ee8965e57b741becacb1679c3d1567a4ad05da4fdcaa670fd3c529b7b5560699d57932cf95fe6b386ca43c0e070ec2815ec33bfa3a01aba7f060214bb43efa4ff15a0eb9c87327285ce74bfa55ef5904b7513724a57245727352aa6c354ee8a122597ac3a2f44f4c8f49c7fa899621af7e2ed607b7003e0b5f5a6f784b26c55074c151ff43def00e50fef3e4be9c5ea314f161660d7f954765004d17407b65947ed990"], 0x95, 0x40010, 0x0, 0x0) 05:05:09 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x48) 05:05:09 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x769, 0x96d, 0x400, 0x1, 0x5, 0xa3c6}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 2000.379770] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 2000.405535] cramfs: wrong magic [ 2000.446061] cramfs: wrong magic [ 2000.474377] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 2000.657453] audit: type=1804 audit(1609823110.300:8846): pid=846 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1716/bus" dev="sda1" ino=15835 res=1 [ 2000.741608] audit: type=1804 audit(1609823110.370:8847): pid=847 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1716/bus" dev="sda1" ino=15835 res=1 05:05:11 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x100, 0x8, 0x5]}]}, 0x24}}, 0x40) 05:05:11 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0106030b0100004a0200000600000000020000000000800000000000000000b08aa81508fe21000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029d4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000f1ff000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec0abe90c2acd43d18ded8fa6ff222c40b503f35bf5ab5f94239931e7579b9c11b1735a682ded9c17d4146e029830bddce8787f76d0bff6b8d3fcf506d2517948fd1bcf946a83dc911b823d7bd79852cc41c0ecf3faa75122043f0a832317a4f1d335bc4be5982435bf9c3bd01d23c805ec1448a728436b769c6655b96bc07e214a32dccb725c9d9ebf8a5125f6d8c6291053821a96cab7cad057e5483dd163d9e1987ecf9de395be515622ffb895f3e504ff076de516753899b8f58cfa35cf3c4207f088fbec222b1005ef5ef4ed47b293dbe8bedfad56c43aa587d1b7783d9767c5d91d5c88331759174908a184700000000"], 0x827) r0 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x101) prctl$PR_SET_UNALIGN(0x6, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x8c9, 0xffffffffffffffff}) 05:05:11 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x2000000000000, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5af1585c29d6f08cb2e7b887afacc659cf1a28e6e446d22327b0cd4d7b8deee26c9ad7bc48f302eb764a47a5040e054a54f503a0190b7497d2690f217fde17dee61e07bbbac292ee1d5fad6e5a9f73fc5d4d07"]) 05:05:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r4 = socket(0x25, 0x5, 0x0) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x401, 0x0) r6 = socket(0x25, 0x5, 0x0) connect$pptp(r6, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r7 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf25020000004c00078008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0c00050000010000000000000c0005002f00000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) 05:05:11 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 2001.473438] cramfs: wrong magic 05:05:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 05:05:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="010026fedbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00010073696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e300000000069731c0e058fa4318f3ac0d2eeb09f12a4d861dd8c6014dbd079cfca26024a94717e738defb5b61369715251c53995d28e50"], 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x20000021) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xa800, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x6) r3 = socket(0x25, 0x5, 0x0) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000002c0)=0x3, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000d56770958f45071527dc3077ea43227f9d8b3a037d75e247f2e37c2b17341747a80a60f6229485ab9c0fd5dab7eccddec58a4a35981e29078c1cceb7cedd16c492fd992f494e265a25b162ec0c51", @ANYRES16=r1, @ANYBLOB="795f0000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) 05:05:11 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) utime(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x8000, 0xeb5a}) 05:05:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfd04) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x74000000, @empty, 0x2, 0x4}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="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", 0xfe}, {&(0x7f00000001c0)="16827fe3ce20aa061e46db64a5ccb304ad3f8a722c85c55f1680088987982219e49062305cdecdadef0840983c82b58e72ff1ab154f448e2957dbae653b5a9af00db4c1582ae8ead0ad4e32f1b88c6d83f4f6d583f013a7544a62820d84d8acd4f0ba46b364ed78128963c2e11437cb8647eb2446db9708da54eade85e982f043c245707a30ac8ce9f47b7faf18d46f1087a389a0243f5", 0x97}], 0x2, &(0x7f00000006c0)=[{0xe8, 0x104, 0x3, "2d7d7ca5cab9e0f4833ed59406001f1d9924735f35bad6bf3823307ff7e0bd4036bb46c1a1929b3c896ad2575d57c920b44cceb797393dc21295f71d12fc3d1219e0edb1188b08984e3cc1f39740f756bc88a22ab106831d32fc0d7dd58a0bf48d815cb24facaeeffc97c3c493222d4ac4e5eda05bb9dedea17786c95b9a8cbe5255e3a7ea6ca2762c682f07677292b19a9dfc49976783d3b01fc76a71f2f5161e9e3774dea68cef7ec34459322bfbb338a76a50bc7e2514de19aaed1ff83e016ef73984fbadca9e0d7546071c0f3771db378732369e09"}, {0x48, 0x116, 0xf151, "19d13fa0d7842ad4eb9ea6d45a8ecff675d9cfa1e8be149fd2b289ea424854861633bdaaa6819f8b04f81126311b836f2b393e13f0402b"}, {0xd0, 0x1, 0x0, "c928baf140ef59ef65eedc5f853887dcd5953b7d7dda32f353489c6e692bc7f354ea7fa088c69c002f6e26659e07b216420d87792cf3346aafb98dd8181099d4b02570450fd41c8e71c364c64a804782cbb9c5b52e73f62d94e82fe9b8b69d529106e23f22ca71059d19c1ed6aad5e3fb10b2121b9c89fca98fa7ad633e6e6f1cbbe4bf4be642474268b671de100cf59a059a37e5b5adbb20ecad4e2ad899698e2cbe0911e572ca96a6a8633574f05033752372f8e2b987f3f9350"}, {0x1010, 0x0, 0x6, "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"}], 0x1210}, 0x5) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x40107447, 0x20000000) 05:05:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="8e26f0c897c5639738ccff03a52025187f54e287bf14d5"], 0x1c}}, 0x0) r4 = socket(0x25, 0x5, 0x0) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = signalfd4(r1, &(0x7f00000001c0)={[0x71e9]}, 0x8, 0x800) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x16) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x1110, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x10fc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2e, 0x3, "9be3c4bdbd62af0938328119e9d78504dfd93364dc64d58bd66a9834a898010a8beca2fe12f96445340c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c91ecfe2e2caf43050ff7daaa3caf67fb4851e370deb550b037f61ffd2c5c91b477f95"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "fd7f4ca910a4ff6e68c82f5faf4b394a150865501761c628c8e9b0e6ae91c9bbc0959b7c0cf82e86e26cd96076c94bcb3273f788d26d0413640af7e075aebf0f0bfa5ccff8b6a1d71eb5ad792f482f4d521ac99c815dc41845b0f0bb7f378e0df36cfc2f999f6ade"}]}]}, 0x1110}, 0x1, 0x0, 0x0, 0x14}, 0x24008811) r8 = socket$packet(0x11, 0x3, 0x300) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000240)='./file0\x00', 0x82880, 0xc8) 05:05:11 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000080)) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000f00f88)) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="95"], 0x1, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000078661b"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000000), 0x8, 0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000100)=""/33) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x51, 0x3, 0x9b3b, {0x2, 0x87}, {0x6, 0x2}, @const={0x400, {0x5, 0x3e, 0x0, 0xe63f}}}) socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500"/18, @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x60, r2, 0x708, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x6d}}}}, [@NL80211_ATTR_SSID={0x23, 0x34, @random="5635d55f9359eef9ac1034c51ba1e2f4f14b1d627c5bc29b0cf33da286089c"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3e33dc03dacc"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x136056981464973d}, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000140)=0xff, 0x4) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x4) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) [ 2001.645737] cramfs: wrong magic [ 2001.854896] audit: type=1804 audit(1609823111.490:8848): pid=916 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1717/bus" dev="sda1" ino=15774 res=1 [ 2001.940411] audit: type=1804 audit(1609823111.570:8849): pid=919 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1717/bus" dev="sda1" ino=15774 res=1 05:05:12 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:12 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0xc0800, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, r0, 0x2f38c44fac2c5f79, 0x1, 0x0, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x78}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdc2}]}]}, 0x28}}, 0x0) 05:05:12 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000140)=ANY=[@ANYRES16]) r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="094a29bd7000fedbdf250100000006000bff0a000000"], 0x1c}}, 0x40) creat(&(0x7f0000000100)='\x00', 0x50) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x418, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x1c}}, 0x4000) 05:05:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r4 = socket(0x25, 0x5, 0x0) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x43c, 0x3f4, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x2, 0x10, [0x5, 0x20, 0x3, 0xfffffffd, 0x0, 0x7, 0x7, 0x3f, 0x2, 0x5, 0x2, 0x1ff, 0x8, 0xcb, 0x1, 0x4, 0x0, 0xfffffffe, 0x188, 0x9, 0x7fff, 0x6, 0x81, 0x7cd0, 0x2, 0x6, 0x0, 0x40, 0xa, 0xfe000000, 0x100, 0x1ff, 0xa1, 0x9, 0x4, 0x1, 0x1, 0x3, 0x100, 0x2, 0x10000, 0x83, 0x7, 0x2, 0x8, 0x9, 0x1, 0x9, 0x4b, 0x8, 0x1ff, 0x5, 0x5, 0x2, 0x7, 0x1, 0x9, 0x4, 0x401, 0x5, 0x9, 0x8, 0x7, 0x101], [0x7ff, 0x5, 0x1, 0xfffffffe, 0x6, 0x9, 0x6, 0x0, 0x9, 0x0, 0x9, 0xfffffff8, 0x8, 0x8, 0x80000001, 0x7fff, 0x4, 0x1, 0x1ff, 0x6, 0x0, 0x80000000, 0x8001, 0x0, 0x3, 0x6, 0x28a4, 0x8e, 0x1, 0xf1, 0x6, 0x9, 0x3f, 0x5, 0x5, 0xff, 0x4, 0x2, 0x2, 0x7, 0x4, 0x7, 0x1ff, 0x0, 0xff, 0xf, 0xb63, 0x6, 0x86, 0x1, 0xd85, 0x400, 0xff, 0x4, 0x20, 0xfff, 0x80000000, 0x7, 0x7, 0x1, 0x7fffffff, 0x7f, 0x10001, 0x80], [0x80000001, 0x401, 0x2, 0x4, 0x4, 0x0, 0x3, 0x1000, 0x6fb0, 0x9, 0x6, 0xc7f, 0x0, 0x7, 0x0, 0x0, 0xff, 0x3ff, 0x4, 0x3, 0x0, 0x1, 0x836, 0x1, 0x80, 0x18, 0x9, 0x8000, 0xfff, 0xff, 0x5, 0x3, 0xf4e8, 0x1, 0x7, 0x9, 0x10001, 0x2d3, 0x2, 0x3, 0x100, 0x1, 0x3, 0x4, 0x8, 0x1, 0x5, 0xf6, 0x823e80e, 0x400, 0x7, 0xf2ba, 0x4, 0x1c, 0x1, 0x401, 0x3, 0x7fffffff, 0x401, 0x4, 0x2b, 0x8001, 0x9, 0x3], [0x10000, 0x5, 0xfffff001, 0x4, 0x3, 0x5, 0x3, 0x3, 0x7, 0x4, 0x3, 0x1, 0x7fffffff, 0x1f, 0x3, 0x400, 0x5, 0x915d, 0x8, 0x3, 0x1ff, 0x4, 0x3, 0x5, 0xfff, 0x1f, 0x401, 0x81, 0x2, 0xf542, 0xffffffff, 0x1, 0x8000, 0x82de, 0x3f, 0x1, 0x3, 0x4, 0x1, 0x400, 0x4, 0x1, 0x120, 0x8000, 0x7, 0xfff, 0x6, 0x9, 0x8, 0x8, 0x8000, 0x4, 0x2, 0x7, 0x28f, 0x0, 0xeab5, 0x9, 0x59d, 0x2, 0x1, 0x8, 0x1, 0x1], 0x1c, ['l2tp\x00', 'l2tp\x00', '(-.-\x00', '\xb8\x00', '&$^\'\x05:\x00', '$\\(\x00']}, ["", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x26058040}, 0x810) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0xd5, 0x9, 0x4cc, 0x8000}, &(0x7f0000000240)=0x98) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="080025bd7000fbdbdf25010000000500db92b4c34ccc7fa08ed88d7562250099cc8f20564f7bc42561414c845c3134ceab3bd029fa07c808b7c18108a6f1f3200006f7ad4fe96b2decd17a3f749836ebba17afd64abb00353f774a69e5b1f13e8ce6b2d00fa60d90baaeb2fe283f3e1e810bb7a5291500f3cc65618bc0b1ec8128c13909c00e7e62b9874d90bfef9a9d5292ea01b6e57a1f8b"], 0x24}, 0x1, 0x0, 0x0, 0x9a1e98b2e9c9ab08}, 0x44000) 05:05:12 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x5) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x80000, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000006c0)=""/4096) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x40107447, 0x20000000) [ 2002.684944] cramfs: wrong magic 05:05:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080926bd7000fbdbdf25060000003c000180380004001400010002004e23000000000000000000000000200002000a004e2400000001fe800000000000000000000000003e31d6714e04f75dca18ae7c301bf5002e090000001c00098008000200000001000400000009000000"], 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="795f0000000000000000130000000c0009ac7a6c40fbdb315290305b0767e9d7368008000200000000009603e79bf392cd982e8bcec6337e182a3a5bbe0d055043ada4ce38a487a58a1e6b2eb83fdd6bb475eaf8045bfa5e34893679f92084226d49ab82b6c153b0931e86703abe982332a4c4347761fc2fd744bfe4d050118280a11d"], 0x20}}, 0x0) 05:05:12 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x2440) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x70e7, 0x8001, 0x3, 0x40, 0x7}, 0x14) 05:05:12 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000040)={0x6f2, 0x1}) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfd04) signalfd4(r0, &(0x7f0000000000)={[0xa2]}, 0x8, 0x80400) 05:05:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="ea0dc1a5", @ANYRES16=r3, @ANYRES32, @ANYRESDEC=r0, @ANYBLOB="ae3df0465337e7eb3cb08c4b5f885eb84b3b6a92e551a8faa79ae0d4d0e545e92d55c83df8f6e037649aeab6d5a774c9e99929c3114f783ed24158dae43cc1e909fbee3d443523dc38b76c84fc95f30a9e0b6c2a717d4bb6f683b06260a889a1860a4c6a56d4d5a7b0f971cd80bb996fc2d509dc636ec33ef1ba96e298c29effc9d42c6c6f74e6b33fbc2d7ec2d3fc125cc96386cf8faf33da274d4001b4b6d6d2551e81d8b143d6b23d1d4a004ae80f5423e071cb7e0d64c7856c1fd4327d44461657811fb6ce2d837002ec7aae3a0853c1c52b0cbbf294c3686706e950e7756a15b8b028d32e9ae4475c3082ae6657c3049f45b848"], 0x1c}}, 0x0) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x10400, 0xa0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x1, 0xe0, 0x6, 0x80, 0x18d7749, 0x3], 0x7, 0x800, 0x0, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40006334277f7bf1248308eb00002400090f0000000000000000a13634e1", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000000c0002000800060000000000"], 0x40}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket(0x11, 0x800000003, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r10, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2501000000040003006000018008000100", @ANYRES32=r2, @ANYBLOB="140002006e7230000000000000000000000000000800030002000000080003000200000014000200697036746e6c300000000000000000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=r8, @ANYBLOB="3000028f2c00018008000100000000000800010003000000080001000500000008000100010000000800010006000000200001801400020073797a5f74756e00000000000000000008000100", @ANYRES32=r11, @ANYBLOB="0400030004000300780002801c000180080001000700000008000100010000000800010001000000440001800800010003000000080001000e000000080001000000000008000100030000000800010007000000080001000200000008000100070000000800010008000000140001800800010007000000080001000500000004000300"], 0x14c}, 0x1, 0x0, 0x0, 0x400c004}, 0x24009044) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f0000000040)=""/112) 05:05:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x78, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe0}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdcf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4166}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 05:05:12 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 2002.878126] cramfs: wrong magic 05:05:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbfbffff06000000140008"], 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x74, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8b}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x74}}, 0x24040894) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r4, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) [ 2002.931099] cramfs: wrong magic [ 2003.234700] audit: type=1804 audit(1609823112.870:8850): pid=1000 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1718/bus" dev="sda1" ino=17493 res=1 [ 2003.319758] audit: type=1804 audit(1609823112.950:8851): pid=1001 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1718/bus" dev="sda1" ino=17493 res=1 05:05:13 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:13 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1f, 0x42) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r1, 0x711, 0x0, 0x25dfdbfe, {0x9}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 05:05:13 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_gettime(r1, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x1000, 0x4, 0x4, 0x1, 0x36ce, {r2, r3/1000+60000}, {0x1, 0x2, 0x0, 0x5, 0x3f, 0x9, "50999a0f"}, 0x400, 0x4, @planes=&(0x7f0000000040)={0x5, 0x7, @mem_offset=0x6268, 0x6}, 0x6}) 05:05:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000300)=0x2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000280)=@add_del={0x2, &(0x7f0000000240)='sit0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000000", @ANYRES16=r3, @ANYBLOB="795f0000130010000000000000558d080200000000000036471df66d48a8d4c20ceb1bfa8c7badb17853e28262b1245ec9f3bdcfce70d08e3e14eae7f522a0d98563684a7a70d31427a92e091830686b3f8f0efb25e71b582ff4f29e00cfa3cbdc9ee1002225215a5f9adc35476ec3cdc347ee49e017f01352fbfd4c17bdfe9739e6134e8ab2bfb6586885b542cf9412cda50f9c1d1f46e88a47a94269252817cb71674d82b0d83ab2ced6cf5f886bcee511fdf8fb7bf12b571cff9c8716dbb16b174663a407203f2d48e93e3234288b8e6bce86c32894a029f0526920c163b6e236a19c485c8efe45639e350811ca2167b5f1fa00000000"], 0x20}}, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x10000]}, 0x8, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x612}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x18, 0x1}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 05:05:13 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x3, 0x7, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000280)=""/67, 0x43}, {&(0x7f0000000300)=""/200, 0xc8}, {&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/92, 0x5c}], 0x7) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x98f, 0x30314247, 0xff, 0x5, 0x2, @stepwise={{0x1, 0x9}, {0x7, 0x5}, {0x3ff, 0xffffffff}}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0xfd04) signalfd4(r2, &(0x7f0000000000)={[0x1]}, 0x8, 0x80800) 05:05:13 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x888820, &(0x7f00000000c0)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, 'subj_role'}}, {@smackfsfloor={'smackfsfloor'}}]}) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x48, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400c1}, 0x60814) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) read$FUSE(r3, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000180)) setxattr$system_posix_acl(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="040001000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\f\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0xee00, @ANYBLOB="10000200000000002000000000000000"], 0x74, 0x3) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={r0, r2, r4}, 0xc) 05:05:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x4c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44080}, 0x4000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:13 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x3, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x26}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_MASTER={0x3c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x1]}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:05:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:13 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x200842, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000540)={0x0, &(0x7f0000000500)=[&(0x7f00000000c0)="32fedff73ac329b18647159a82a6dc551e906d73626521cb38753174a774dce0adcb12bb887e331837337b9197047d238abdd9751c9075627d16d8daeea980dc6fe2122d2fbcc8e136284644d228", &(0x7f0000000140)="e17cba1c88b0248c0725193c242f19a3", &(0x7f0000000180)="a57834f97b6c304112fb7436f72c8afff84df3ccc2c3dcf953944564bb28c8abb3aaafe1fd954b4ad12aa9fb3cc2abd4d8e93a3239af4294136f979706df1da5e9263b08339c08b293678a8ed668ad", &(0x7f0000000200)="632386082586ef721ad350c72865108b8038583c313073c05ff883ba6065482ee91eda7e412f12b1e065a1bf5588e150906ed5a8c8e691f40b3c78c856469f1dbe8129bee1d914737a46b307cd8bbb66ca36a40d437101c0096d2f60704aa073b40fca10a150f9917737b784556ba7fab470db82c59c45b6e1c04ca3ca35ff54ec14c9ba9a1f6e973b8319d13b35471e1625d30cd802780237ef7422048b85c498e2889532c1e6e8fbce695b5e65907091e59b23d8625a144c08482c4f7390af2b5c7b77dae163635287bfcc755a15283cfd00d411fa9e7e035a1e36ba249d534964c4e8d4f1ca2f3bccb35f1002c344ee5781a853", &(0x7f0000000300)="0c6760a962f7a1a815b6b456b3f7cf4b6d05167f2e35ba09047b375c67aacc825ff331d2e509e3ccf92e9ac3097707d9ebed92cdfa8524a322f72939c9795b12a7bbf4b9b4c11dde3e0c", &(0x7f0000000380)="4ee89e8ad0d9ca6541a55498b4d09b07b309c64b8a75a4bd4866a708dd6ce8513a9ecac94a08c01e92277ccfae52caad6adfa7ae38eb506cc534647cc64cde24214916dbe5517cbd998eab4bf642930a48a90b250fb17e40edf896dfcccb6f3511e325516aee541a3e4eaf761e299d2fb467c23e1a5ed6cfc0cbb23cca5bcd9880d736f5f9d45ae8d7f1c4c76390f70872e6e087dc45994192eb8b8ab914d8af00a41f5b733d3164e9e065357f8d0a2da61ad1d34bae30192c8a74687b5e", &(0x7f0000000440)="253864afaaa3f8086fd5a19123e498c6f243816531a17f2782aed5c73e1355ba3e11e61b1cf97e98b492adf7c3e50ddaa1b1d528b03ea1d26e5ed65ca66bcddde8f3aaad9b125f9de759e772a819be52b5732c61388776aa3709781fbdf621f72624999c519d0acdd3e6df60199d18c5fafec24c04692666c1119aaa2c93fabf1cbf0d50f841d94e16c4d2526e15c4b6"], 0x7ff}) 05:05:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fd32f7020000000000000000000000008d02747d51ba99cf0be58f41715213f2598662309f9b03da4fc5a1b0fde31acb154451bbddcaaa26d0f8ae18dce0b146379632744bb7822ae311e62ab3aa447cc1af068500655b20c71899b6f86e5d651da1d7bab43383ac3d35df2502bd4a77d0e81a9a367d75a2e2d52cacdf2c22a8b7a097d853fb94d04d2e33fa65442dfe1fe4d14a7c417af1d5cfeb3fd6b6de56f694ef4205d1ae31c330d6653af3ea8d40164cfe3b77f82450393699b40c8e226f5e15bf8103c76f0d60f7eecbdf237ddb06be5aec"], 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x801) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r3 = accept(r0, &(0x7f0000000240)=@alg, &(0x7f00000002c0)=0x80) ioctl$sock_netdev_private(r3, 0x89f8, &(0x7f0000000300)="3466d5343291019cbee27c76f4e4494a7d20d64cff124d06587d2221b7d379fd673321481412ddcde6270238a870456522afcd8f1cee9d2c691c19836755b2be304c2a3e77fda15b62f0b11896a8076098e867771b8a42471e2d96051ef36b620bd7c1") sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r2, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) [ 2004.608722] audit: type=1804 audit(1609823114.250:8852): pid=1056 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1719/bus" dev="sda1" ino=17153 res=1 [ 2004.688591] audit: type=1804 audit(1609823114.300:8853): pid=1057 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1719/bus" dev="sda1" ino=17153 res=1 05:05:15 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}], 0x6, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x20) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x64, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x800}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000008}, 0x4004080) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x5, 0x2, 0x6, 0x2, 0x1}) 05:05:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x120001, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@uid_eq={'uid'}}, {@smackfsroot={'smackfsroot', 0x3d, '\xea\x04<\r\xe6\xde\xd8\x88n\f\x19\x14\x02\xd2#\x1f\x8d+rI\x85I\xd05\xf1rO\x16-Z\r\x83\xad\xdb\xce\xb6 >O\xfa}\x91\xc5\x9d\x8eZ\xa2e\xc2\xf4\xa6\v\xdc\x16\xb6\x18,\xb19x\x15\xcc%*\x94\x95\x95'}}, {@subj_role={'subj_role'}}]}}) 05:05:15 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300c7d6e830cce87ed96c748ec04feb896841b1a80bc33ac89125a2af6d5b19b32aa9a24125af9b620adf", @ANYRES32=r3, @ANYBLOB="0800050001000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x6008018}, 0x8000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0xfd04) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="eda193a7a3ad0fc27adec832d56d682b626b29007c64eb05c6cbf420df1ee31002c82e5492ad0e2bce9ea787760b9e10958e5e64c8fd9096031fbae5da9b86f047ec08b055b85784cb56e7ae2c67884407dbdc22f1757fc873dc17579215f3810824673d64dfe60b22016f080e827b57dc8a07e2af56ddce48f9198d6545c77c", @ANYRES64=r1, @ANYBLOB="795f0000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x3}) 05:05:15 executing program 0: ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f00000001c0)='./bus\x00', 0x0, 0x3, &(0x7f0000000140)=[{&(0x7f0000000040)="e8fc35c4bfc80289b7f6a9e13c8c561363668cafcd0356ea6c38c62fb2a38878bc0fef501154b4a4c73540e9699a13c7b8", 0x31, 0x8}, {&(0x7f0000000340)="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", 0x1000, 0xb71}, {&(0x7f00000013c0)="53abb9207314a0efe26a086a10f6e2890f0304b1e8f3815e06bc0e6c9cdd553b29240345833fb2d51e902dc99e04d43303d9ffdf7812ef444faf5451676eb624fb2971b1000000000000bd3fbbb84ff551e533ea0eebc167aa71df4ca4ef6657194802e2ca770dcc7f3e29e4c6dd78952b331bbf89752f8a13f37878edf8b279653de8449f115510969c3cb28716ac71919eaf6cb3da9cfc0ad9176e4773abf7d45a9dbed8ae7da4d36044ba0c23fa23b92ac5fca396184b090950ca696a15883a9eaaa2a25f56e9c86e79f745e25e9419aff38d3b5d54810c164390d2400924c91ca99e64a6b29529adb34db15594189dde723c31f392dbfacade87b6c46b53f220d2e98da737588cdae1f6fce487ca5bc26216e5dd4e5ba892c4dc3a698e98275da7aa5478661a27589c2c147870462da9ea78b58e5e1102ba9b1ec7d86ce8cb16d05075a66a022ef775", 0x14b, 0x5}], 0x12803, &(0x7f0000001340)=ANY=[@ANYBLOB="41da0509e88f0140925569abf47e956b9af1628b56250a6bcec9174135c0f1676d21449f6df47bf9f1c585ddc89c2ec1b59bd33547ba2bc7c3f1f8fa43d4c85a1e1dc22570a3ea74307280178deb"]) r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x102, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={r3, 0x6}, &(0x7f0000000200)=0x8) 05:05:15 executing program 5: r0 = syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"632358d1519ea73768502733522b030d", 0x0, 0x0, {0x6, 0x5}, {0x0, 0x2}, 0x71a10356, [0x4, 0x1, 0x200, 0x3, 0x0, 0xffffffff, 0x0, 0x1, 0x7, 0xfffffffffffffffc, 0x6, 0x8c9, 0xfe, 0x1, 0x0, 0x10001]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000200)={{r1}, r2, 0x12, @inherit={0x48, &(0x7f00000012c0)={0x1, 0x0, 0xffffffff, 0x6, {0x22, 0x7, 0x8, 0x4, 0x2}}}, @name="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"}) 05:05:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008004}, 0x40) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r3 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x1, 0x2) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000002c0)={{r3}, 0x8, &(0x7f0000000280)=[0x2, 0x9, 0x80000000, 0xe16, 0x3d24, 0x2, 0x5, 0x7fffffff], 0x8a1d, 0x7, [0x48d4, 0x5, 0x4df, 0xf6]}) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r2, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:15 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="4413e40541236e707d27c609421841a5523543a9dd38cf292e2393ba777960fd63d3b5adf566c273c76a2169eac49ccd80fb1df61683a373c23a8c60026a9a3fbe1abe6cc59e3df9d4f5a3f81d902a", 0x4f, 0x20000000, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @private2, 0x10001}, 0x1c) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:05:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x11c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_PROTOINFO={0x44, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x40, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x3f}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x20}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x101}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x40}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7f}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x40}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x25, 0x5, 0x0) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r6, 0x29, 0x81, 0x1, 0x4, 0x40, @ipv4={[], [], @rand_addr=0x64010101}, @local, 0x40, 0x20, 0xfffffffb, 0x5}}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r8, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) [ 2005.566885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:05:15 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="000226bd7000fedbdf25080000000800020005000000080007000a01010106000b0011000000080002000500000008000800e000007e5efd8700e00000010800020007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc800) [ 2005.681680] cramfs: wrong magic 05:05:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0xcb, 0x40, 0x2}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xcb41, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="1107000000000000001e0907000008000300b5b76c22224e570d79d0d7b226f1b1217f48e486cbc5ba4ed087e1a37d2c45b81387b98a46a7d878c9974583107cb562c7b92e146d71869c748c9b9dfb0763fc233e1c6098616f7434795f1cb424a91620943f9ac513f613a0dafa59023efb4d20d5f5a9d2beb5bf4c0442f8737edf97480694a78173f296f26f2a099a34f8f7a44265edb8666cbfffef9cb0045278d92f04936f87d1c0bab7b8e40007e19a473a599651c5818538899029c962376b47f2e779106650545562116229404a0265ee830357efd18628177af40c31943cdf", @ANYRES32=r4, @ANYBLOB="e9274ab3c2d925d4ab7d573f8d78e3e6ff80b50e0bf1b6058d009bdb47fd15bad20b3267b749f2e0897254925f39953381c8f5e48add033f066e7e4fbe4140419be90493ffeb537aa3aa2be7ee8014fed86bc665c27e"], 0x1c}}, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000006c0)="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", 0x1000) [ 2005.736628] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2006.086802] audit: type=1804 audit(1609823115.721:8854): pid=1129 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1720/bus" dev="sda1" ino=17153 res=1 [ 2006.164122] audit: type=1804 audit(1609823115.801:8855): pid=1130 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1720/bus" dev="sda1" ino=17153 res=1 05:05:16 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}], 0x6, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="795f0000000000000000130000000c0009800800020000000000e4c458de6232c1480c035d2d030163ed60b10d6741fe1938e41b0c402625"], 0x20}}, 0x0) 05:05:16 executing program 0: r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x20080000) getsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="008957294255e80f2710afdbbf0072e9805510cacd221881a3a9aff6d5dcc99effa423e9b0010e6755f9330d4be57844ee9b47790b7a93b06987d3aca3539bd4eeba5ba3d83e1bd77e6cb92a216435a48639613bf6f69e74b7a959f75de84a01da6556e4a60f54dd8017b772d3275e7b6501cab85c18dd6daf745bb7febc3e7298fdcbd6075ec367898300c44cbcbd23a5d86bd2c4"]) creat(&(0x7f0000000000)='.\x00', 0x80) 05:05:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110700000000000000000900aed61e9bb07e0640504125000008000300a763d360cb6c3dc434deeb995adc8bdb43a7601b16cb335a3a8e5a74e1adc1c7e5bf6c1bc741b36779d4a9810f7955bd64589b3111295c6745bf017ddee88ca9ca59eedff500c45bbdd035e1477de189b19c3ab0973d9b32a035e9cf7c76dc2c959347bfcde1a5e11c17e636b969addafc62b98c1fd1439e9f3ee710241f35313635efb16025eb13c5c5bd9bfc8d65eb8c93c11ed76c376b34f2c6ee2885309f012359a3f7e5910b4786eb5f9ddf7ea4cf850e3289adccdcca630a0de79a", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:05:16 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x8) r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000040)={{0x88, @local, 0x4e23, 0x2, 'rr\x00', 0x22, 0x3, 0x6f}, {@private=0xa010102, 0x4e21, 0x0, 0x7f, 0x5, 0x1c0}}, 0x44) 05:05:16 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000280)={0x2, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000140)={0x7, 0x1, 0x1, 0xeb6, 0x7, 0x401, 0x7}) syz_mount_image$v7(&(0x7f00000000c0)='v7\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x3, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xfa, 0x1}, {&(0x7f00000006c0)="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", 0x1000, 0x7}, {&(0x7f00000001c0)="43a65881d627722d40bd2c8f0ac0d71cc2292da6532c2073a7f8be54edee5e6d18418844c4deaa6580c13be9dfc5f57efd9c61d118502590bea583d71f25879d8c8ae800003be3118b62c1c82868d80bd55d2e48f8dc9d8bb55763b9850f154d48602401dd3e4906742e16fb4c41b0f06fbc9f0e3cd03fbb22ecee13", 0x7c, 0x4}], 0x401, &(0x7f0000000440)={[{'/dev/dri/card#\x00'}, {',[(){'}], [{@dont_appraise='dont_appraise'}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, '/dev/ion\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@dont_measure='dont_measure'}]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={r5}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') 05:05:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="efd2464d3217e979d5dc45ff2a2c65851d09c9173e9b9af5596436bd0f63b0e3aef608b29a133c753e52055c3707eb9f5ccc246f393a046e6aee54fcf7085fc011b00089bcde4663fc0caa3ac147294e2cac8808e324d1154a3c9c432ac3d330b9c0", @ANYRES16=r1, @ANYBLOB="795f0000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) 05:05:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r3, &(0x7f0000000000)=[{0x9d, 0x2, 0x1, 0xa0, @tick=0xde, {0x4, 0xfa}, {0x8, 0x1f}, @raw8={"c3fbd4c15e858e48f84e40d8"}}, {0x4, 0x1, 0x7f, 0x42, @time={0x2, 0x800}, {0x0, 0x3}, {0x5}, @queue={0x8e, {0x0, 0x7}}}, {0x49, 0x5c, 0x6, 0x3, @time={0xffffff7f, 0x6}, {0x0, 0xf9}, {0x1, 0x7f}, @raw8={"1506667acca0a63a7e769901"}}, {0x5, 0x5, 0x7f, 0xbd, @time={0x100, 0x6}, {0x4}, {0x6, 0x80}, @raw32={[0x4, 0x2, 0x8]}}], 0x70) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="8bb7cba25b6bcef466d621c71b075d6e76028e724c838f0ee29fbe0b71f704eac0a4b4bb2ec560d070831c87fef3f8bd7a854e"], 0x1c}}, 0x0) 05:05:16 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) 05:05:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x3e9, 0x800, 0x70bd2a, 0x25dfdbfb, {0x44, 0x1, 0x1, r1, 0x5, 0x2, 0x8, 0x80000000, 0x0, 0x9}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r2, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) [ 2006.855896] cramfs: wrong magic [ 2006.862065] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 05:05:16 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5c373a1f1c71ac0448a77a35bcf92502002d2061479a3f2f85561f3ae005910ca5d9bc9b86a22ffa372c416cf8586e28cd98d36f6d5dcff952f7a3e529b583135ca82919b01a82a5e38b35da4549c9b1c6d1eaeb8a4159df7e1cb81203fd14751317b880a2d9a37303790a22d03fe81da75639df325b3792d70d88c1f129259843e4b0ce9d0be7835045bf943e9ab908f04e2a1d93565284863b07c917667c5026031d8727b53733b4f464f158493d8987262f51719d9b50c9ca65aff0e5e8dd82458dfdb8fc5bfc3509cf82d1096cc6724e7223b99a28f87538dff31c7339a17e6c566d1c1688b60ace27e884091b"]) [ 2006.915788] cramfs: wrong magic [ 2007.014354] audit: type=1804 audit(1609823116.651:8856): pid=1174 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1721/bus" dev="sda1" ino=17546 res=1 [ 2007.100501] VFS: could not find a valid V7 on loop4. 05:05:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x206041) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000540)) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r7) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r9, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) [ 2007.160192] cramfs: wrong magic [ 2007.175091] audit: type=1804 audit(1609823116.731:8857): pid=1178 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1721/bus" dev="sda1" ino=17546 res=1 [ 2007.209267] print_req_error: I/O error, dev loop4, sector 0 [ 2007.215025] Buffer I/O error on dev loop4, logical block 0, async page read [ 2007.225129] print_req_error: I/O error, dev loop4, sector 2 [ 2007.230953] Buffer I/O error on dev loop4, logical block 2, async page read [ 2007.239504] print_req_error: I/O error, dev loop4, sector 3 [ 2007.245255] Buffer I/O error on dev loop4, logical block 3, async page read [ 2007.258351] print_req_error: I/O error, dev loop4, sector 4 [ 2007.264102] Buffer I/O error on dev loop4, logical block 4, async page read [ 2007.272455] cramfs: wrong magic [ 2007.275914] print_req_error: I/O error, dev loop4, sector 5 [ 2007.281924] Buffer I/O error on dev loop4, logical block 5, async page read [ 2007.289308] print_req_error: I/O error, dev loop4, sector 6 [ 2007.295016] Buffer I/O error on dev loop4, logical block 6, async page read [ 2007.302432] print_req_error: I/O error, dev loop4, sector 7 [ 2007.308231] Buffer I/O error on dev loop4, logical block 7, async page read [ 2007.359679] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 2007.371099] VFS: could not find a valid V7 on loop4. 05:05:17 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}], 0x6, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="db6dafe6", @ANYRES16=r1, @ANYBLOB="795f0000000000000000130000000c0000000000020000000000"], 0x20}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1000, 0x4) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x10, 0x70bd2d, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c080) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'syzkaller0\x00', {}, 0xfac4}) 05:05:17 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) creat(&(0x7f0000000000)='./file0\x00', 0xc1) 05:05:17 executing program 5: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00@', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf250300000008000200b2a500000800030000010000080003009f35000008000300c000000005000500020000000500050003000000"], 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x8010) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) 05:05:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48081) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:17 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000000c0)=""/166, 0xa6, 0x40000000, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 05:05:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0xfd04) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79670000000000000000130000000c0009800800020000000000", @ANYRESOCT=r2, @ANYRES16=r0, @ANYRES16=r1], 0x20}}, 0x0) [ 2007.692534] cramfs: wrong magic 05:05:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfd04) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000640)=""/189) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0xfd04) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0xfd04) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0xfd04) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x408100, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="ac030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3ac}, 0x1, 0x0, 0x0, 0x40000}, 0x10) ppoll(&(0x7f0000000080)=[{r0, 0x2080}, {r1, 0x80}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x4010}, {0xffffffffffffffff, 0x6000}, {r2, 0x10}, {r3, 0x1448}, {r4, 0x1011}, {0xffffffffffffffff, 0x2000}, {r5, 0x5180}], 0xa, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x9d28]}, 0x8) syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x0) [ 2007.753382] cramfs: wrong magic 05:05:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x38c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1d0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd1, 0x3, "7226fae7a017b9b71bfb08683d17ea5e216435cabe7033e520861ca6e5c4f547567b3eaa5202e837e2b1637984e475f6d80e3d1280c222d7ab3148a8faff7061b074dc49975bedf49e64befb4b909ec7a0fb20197a530fc9f41bd9e996514205614b4ac63edac16c49d8896953e7c0db1680d31c94c51b4e8f13c896f4c9a879760368d236e5a3c4125b83228bfab9bdff802ee398172269eb2b426a2a3ec68c5dd4e7a292e7ad0d3fef935709589da89b217c316f7839623620242c385e34f982de23982cd325f966005372a1"}, @TIPC_NLA_NODE_ID={0x82, 0x3, "f4e44eeeab1152376bd0fc959c96623db5c1651ac5fdfead47f7f27bb03c1d44e95a67abe72be76e7380ae37eeff8920a945afa7a2b0eb9d504f4d8045381cbad103227621667f353e654a41f3439c0895908b6d1ca7ba502a0904387b354f4bdf57fe6d37d9fdf5c0f2609fbf5667c8ecafb12d464ee3bc91f11376622a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7af43d5a2c3abc392de567911d41596f42c0b2aa513d039842d9f8c7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_NODE_ID={0xa, 0x3, "1d25f736b320"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x62}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a48000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfff, @mcast1, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x4}]}, 0x38c}, 0x1, 0x0, 0x0, 0x15}, 0x1040) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x29, 0x1f, 0x9, 0x4, 0x0, 0x81}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000080)={{0x2, @addr=0x3}, 0x8, 0x5, 0x6}) [ 2007.873997] audit: type=1804 audit(1609823117.511:8858): pid=1254 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1722/bus" dev="sda1" ino=15751 res=1 05:05:17 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x6, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3f10}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:17 executing program 0: r0 = syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB]) futimesat(r0, &(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000040)={{0x0, 0xea60}, {0x77359400}}) r1 = geteuid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000009c0)={r2}) setuid(r3) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC=r3, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRESDEC, @ANYBLOB="2c7375626a5f747970653d2c646f6e745f61707072616973652c00910b8b"]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@ipv4={[], [], @initdev}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1900000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40840) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="80000000640402002dbd7000fbdbdf253234e202cac47de98fa6976f96ca0e7634f4d62d3a5a5f335e6043da0755da593e8df02e9660cca036395a231a364450ca5e171e4a9c0f6c93cb75a415ef8d674124b66b3debfe12a37dd337f2d28a62071aba3df455027b7a11b42d247c4a05f9e6c3c4d0e050f37df249b75a540000"], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC=r6, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRESDEC, @ANYBLOB="2c7375626a5f747970653d2c646f6e745f61707072616973652c00910b8b"]) syz_mount_image$ubifs(&(0x7f0000000080)='ubifs\x00', &(0x7f00000000c0)='./bus/file0\x00', 0x6, 0x6, &(0x7f0000000500)=[{&(0x7f0000000100)="9cd2e9ed084ff3611a13ab27682b728f6560efe237f6934af6081602f3f2bb5c6553774d01bd5f1ae3be396284690afeb57f16c7649d6afe80f5a99e19d591f92dbaadd7c92b7b500c", 0x49, 0x200}, {&(0x7f0000000180)="f3df5a72d6d240", 0x7}, {&(0x7f0000000340)="5d942c9f855ba0465dd79b60b429e15d4a478906e5f6e0f9a35e770397503450a650f2c70d6bd955fa4e0799fef0e2cd837012bd01b4090c68cb5a303b83cd2e972316e0c0953e8924451b10741935bc7513636d3887ba7a15fb929eb7202ea5bddbc0858e2f2d971d70ddfb4b568e80b7a16324523a73fdcc106fd2027641e48af1a7", 0x83, 0x57ee}, {&(0x7f00000001c0), 0x0, 0x1}, {0xfffffffffffffffe, 0x0, 0x40}, {&(0x7f0000000400)="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", 0xfd}], 0x4, &(0x7f00000006c0)={[{@fast_unmount='fast_unmount'}, {@compr_zstd='compr=zstd'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, 'cramfs\x00'}}, {@pcr={'pcr', 0x3d, 0x30}}, {@smackfsroot={'smackfsroot', 0x3d, 'cramfs\x00'}}, {@obj_role={'obj_role', 0x3d, '{'}}, {@fowner_lt={'fowner<'}}, {@euid_lt={'euid<', r1}}, {@uid_eq={'uid', 0x3d, r3}}, {@euid_gt={'euid>', r4}}, {@fowner_lt={'fowner<', r6}}]}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20) [ 2008.057904] audit: type=1804 audit(1609823117.591:8859): pid=1260 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1722/bus" dev="sda1" ino=15751 res=1 [ 2008.059774] cramfs: wrong magic 05:05:18 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="dc00800f000000c3dbdf25130000020c0009800800020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000080}, 0x844) 05:05:18 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x46c, r2, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x63}}}}, [@NL80211_ATTR_TID_CONFIG={0x80, 0x11d, 0x0, 0x1, [{0x4}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x68}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x89}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xef}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0xc8, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6d}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x24}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1020}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x304, 0x11d, 0x0, 0x1, [{0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x81}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2e8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x68}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7c}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xfffffffffffffec9, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x1}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x5}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x4}, {0x5, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0x9}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x4}, {0x5}, {0x2, 0x2}, {0x0, 0x3}, {0x3, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x6}, {0x1, 0x7}, {0x1, 0x8}, {0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x6, 0x2, 0x9, 0x800, 0x8000, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x10, 0xfff, 0x6, 0x3, 0x4, 0x7b]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x1}, {0x2, 0xa}, {0x2, 0x2}, {0x6, 0x5}, {0x3, 0x1}, {0x6, 0x4}, {0x6, 0x6}, {0x3, 0xa}, {0x4, 0x3}, {0x7, 0x5}, {}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x6, 0x6}, {0x6}, {0x5, 0x8}, {0x2, 0x9}, {0x7, 0x5}, {0x5}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x9}, {0x6, 0xa}, {0x5, 0x9}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x7}, {0x7, 0x4}, {0x2, 0xa}, {0x7, 0xa}, {0x5}, {0x5, 0x6}, {0x5, 0x6}, {0x6, 0x8}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x5}, {0x6, 0x3}, {0x4, 0x1}, {0x4, 0x6}, {0x3}, {0x0, 0xa}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x4}, {0x7, 0x1}, {0x6, 0x8}, {0x5, 0x6}, {0x7, 0xa}, {0x1}, {0x0, 0x4}, {0x4, 0x9}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x18, 0x4, 0x6c, 0xb, 0x9, 0x6c, 0x4, 0x36, 0x6, 0x1b, 0x18, 0x16, 0x36, 0xb, 0x16, 0x18, 0x12, 0x3, 0x60, 0x9, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x3}, {0x1, 0x4}, {0x6, 0x8}, {0x4, 0xa}, {0x4, 0x6}, {0x5, 0x7}, {0x2, 0x4}, {0x3, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x5, 0x9}, {0x2, 0x5}, {0x5, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x2}, {0x6, 0x7}, {0x4, 0x8}, {0x3, 0x1}, {0x2, 0x7}, {0x3}, {0x1, 0x2}, {0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x2}, {0x2, 0x9}, {0x5, 0x1}, {0x1, 0x7}, {0x0, 0x4}, {0x7}, {0x5, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x6, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x7, 0x4}, {0x4, 0xa}, {0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0x3}, {0x3, 0x6}, {0x6, 0x7}, {0x4}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x2, 0x6}, {0x3, 0x5}, {0x0, 0x9}, {0x2, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x4, 0x6}, {0x4, 0x8}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x101, 0x6, 0x5, 0x5, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2, 0x3}, {0x4, 0x6}, {0x2, 0xa}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x4}, {0x2, 0x1}, {0x5, 0x9}, {}, {0x2}, {0x0, 0x2}, {0x6}, {0x1, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x3, 0x9}, {0x4, 0x3}, {0x1}, {0x4, 0x4}, {0x6, 0xa}, {0x6, 0x7}, {0x1, 0x4}, {0x6, 0x3}, {0x0, 0x8}, {0x2, 0x1}, {0x7, 0x8}, {0x6, 0x3}, {0x1, 0x8}, {0x7, 0x7}, {0x6}, {0x2}, {0x7, 0x5}, {0x6, 0x9}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x94a, 0x8000, 0x46b3, 0x8, 0x81e, 0x7ff, 0x7ff]}}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x5}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x2}, {0x3, 0x6}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0xa}, {0x4, 0x7}, {0x4, 0x6}, {0x7, 0x6}, {0x4, 0x1}, {0x1, 0x3}, {}, {0x6, 0x9}, {0x7, 0x5}, {0x0, 0x8}, {0x2, 0x8}, {0x3, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x2, 0x3}, {0x1, 0x1}, {0x4}, {0x7, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x6, 0x8}, {0x6, 0x3}, {}, {0x5, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x6}, {0x4, 0x2}, {0x2, 0x2}, {0x4, 0xa}, {0x5, 0x2}, {0x4, 0x6}, {}, {0x1}, {0x0, 0xa}, {}, {0x4, 0x3}, {0x4, 0x7}, {0x4, 0x8}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x7, 0x4}, {0x4, 0xa}, {0x3, 0x9}, {0x7, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x6}, {0x5, 0x6}, {0x3, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x2, 0x4}, {0x6, 0x6}, {0x0, 0x6}, {0x4, 0x6}, {0x7, 0xa}, {0x7}, {0x6, 0x7}, {0x3, 0x7}, {0x5, 0x8}, {0x6, 0x3}, {0x1}, {0x4, 0x2}, {0x5, 0x8}, {0x5}, {0x4}, {0x7}, {0x3, 0x7}, {0x4}, {0x6, 0x1}, {0x4, 0x8}, {0x7, 0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x7, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {}, {0x1, 0x2}, {0x6, 0x1}, {0x1}, {0x7, 0xa}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x8}, {0x5, 0xa}, {0x2, 0x6}, {0x0, 0x8}, {0x5, 0x9}, {0x1}, {}, {0x5, 0x2}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x1}, {0x7, 0x6}, {0x5, 0xa}, {0x3, 0x6}, {0x4, 0x8}, {0x2, 0x3}, {0x6, 0x6}, {0x7, 0x3}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x7f, 0x20, 0x20, 0x7ff, 0x3, 0x1, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x6, 0x3ff, 0x760, 0x3ff, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x6}, {0x3, 0x3}, {0x2, 0x7}, {0x1, 0x8}, {0x6, 0x6}, {0x5, 0x8}, {0x7, 0x9}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x6, 0xc, 0x16, 0x6, 0x4, 0x30, 0x24, 0x24, 0x1, 0xb, 0x1, 0x1f, 0x1, 0x9, 0x16, 0x2, 0x30, 0x2]}]}]}]}]}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c810001", @ANYRES16=r5, @ANYBLOB="1100000000ed9c396aec11b519c96d0000752f4ac0f551d183d2cb5d", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) 05:05:18 executing program 0: r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default}) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="bc4cda73eee7008ffc110ef5a8791a9e75930c20c6362e4adeed4fe3af3f13d89f9bf11947ed1769d5d7388a5f061e06f28bd2d969c3430cbde5f76324919b70299172a4c3e0a8c19f1ab37b09ae1d026c72dee133653fb2f83762f2db6fa106ef270ffc466dbc0a5617b83d0357"]) 05:05:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x135c, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "9d5ee54d89ddb80bf4afdea3ce6ce171f761ad73d07cd9c4e1e4e2c354d0d1861d1c"}}, @TIPC_NLA_NODE_ID={0x53, 0x3, "130c1cf19c7ee75a0935ec0605db998d14614bfc0d8bcde434959657618245c3e4f3baeb65634cd0a7adf7e7a638ff6b80bdb34797583db8dbffc3e3d91cd434e68ba429e8e9792b06d1d4d66db23b"}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "23852a9f527f3f5b05862472ddfa500ae4b6fb601de977b115e17a27a19ab65949f0dce072086ffae8fbc4b21e7f2a9ed9ab0c69fd17a994afb1d73e7168ae928a2c045a946c3572"}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x74, 0x3, "1e721ad7e170e1da6a74466f2e636d26fc5393f75911516ba4a46defcbd1ccd6e4ee4d52995511495d0cef2cdc127c46955bfe3bb24d6090413de2d8a0ae676dbcc7ed77c6fc0d52a2aff425af4e0d91c6b0211282c17d8ef44c6b9b14b8fbfb72f5fa1edb86dda27565ca0f494e2b5a"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "941ea83242851e1bd3cb1d23511895a5dd43f7ad2c41c5d45f021d"}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb7}]}, @TIPC_NLA_NODE={0x10c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xac, 0x3, "a5bee61afbae38f0691586785d32635604fac77519e2d43c95941f4d7d9a44a9ffa89037add453800591878b7b35fbea5dd1edaf4bbd89f4fd312a7debe6ff2ae3bd6185adab832793915ed104c29bf7a7419f36d129ae1182f040cb8e8efb7454b3a28dd822e5e32cd4250d4cb43a319d5d2be5dec9073aaadd720626af586559a17615f09eff5aaa92e78ed67944ae6fe6eb88da70a3f85ab38b1318ea74ef64579dfff82884fc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff8001}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3cf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8a7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}]}, 0x135c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) [ 2008.603373] cramfs: wrong magic 05:05:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x1000) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[0x5, 0x10001, 0xffff, 0xfffffff7, 0x5, 0xca]}) r5 = socket(0x25, 0x5, 0x0) connect$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f00000002c0)={'tunl0\x00', r8, 0x20, 0x80, 0x3, 0x7, {{0x14, 0x4, 0x1, 0x5, 0x50, 0x67, 0x0, 0xb4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @local, {[@rr={0x7, 0x1b, 0xd3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @local, @local, @local]}, @ssrr={0x89, 0x13, 0x4c, [@dev={0xac, 0x14, 0x14, 0xb}, @multicast1, @dev={0xac, 0x14, 0x14, 0x16}, @remote]}, @rr={0x7, 0x7, 0x49, [@multicast2]}, @ssrr={0x89, 0x7, 0xfe, [@local]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00&\x00', @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:05:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xdc5) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000000)={0x6, 0x40, 0x1}) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) [ 2008.764723] audit: type=1804 audit(1609823118.401:8860): pid=1319 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1723/bus" dev="sda1" ino=16033 res=1 [ 2008.969126] audit: type=1804 audit(1609823118.481:8861): pid=1322 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1723/bus" dev="sda1" ino=16033 res=1 05:05:18 executing program 5: recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/22, 0x16, 0x40010020, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r0 = syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000000c0)=0x1f) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00') 05:05:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000002c0)=0x4, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r4, 0x100, 0x70bd2b, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) r5 = socket(0x25, 0x5, 0x0) connect$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1407, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x10) 05:05:18 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) r2 = syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0xff, 0x3, &(0x7f0000000240)=[{&(0x7f00000006c0)="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", 0x1000, 0x4000000000000}, {&(0x7f00000000c0)="06ceabe99678caf6ff42541904f1f88c5283df70dcbe1c5534a0f143c9cd20fd5809050e84e019d432ee5f1c0ed478c3f76ef3c9aa42371b04422b0d4018aefbe5af6c89ea5cb57886b92e678fd0369e67fb4c9dc91adfcab44098301c8619909dc4b4ee6dd8", 0x66, 0x1f}, {&(0x7f0000000140)="80cb2edc299ff6b708e8abc86c95826b9c8a4bdd4e4d0c18e746811310a37b365635375cba4e77d07cf63b1c6152d6985f2c21ac76c28ecda381718b06767d46ad81ab636e01705879201f92655080193bb6558132e4af813f45d27b57a973814e73ba5c17e46a231bf4eb55ce8ab240f47d5a5738fcbda60061f8afa40d1ffc88795a93a644dfcc536e34a8719a14ebe6295f6985c3b7680752fbab86178edc88be2c7e6bc4b7cb476135f65295248712b9a7368e8e98681cd7be3e07ddbda03945a76e61", 0xc5, 0x1400}], 0x204004, &(0x7f00000002c0)={[{@huge_always='huge=always'}, {@huge_within_size='huge=within_size'}, {@huge_always='huge=always'}, {@nr_blocks={'nr_blocks', 0x3d, [0x70, 0x31]}}], [{@measure='measure'}, {@appraise='appraise'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@appraise='appraise'}, {@seclabel='seclabel'}, {@smackfstransmute={'smackfstransmute', 0x3d, '&@[\x00'}}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @vsock={0x28, 0x0, 0xffffd8ef, @local}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x4, 0x0, 0x101}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000010c0)={{}, r4, 0x0, @unused=[0x80000001, 0x8000, 0x8, 0x80000000], @subvolid=0x8}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000340)={{}, r4, 0x1a, @inherit={0x60, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000300000000000007bf00000000000000000001000081000000008e00000000000000720000000000ec690791eb000000000017771636000000003f"]}, @name="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"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000016c0)={0x0, "98123aba2f2b51817cc5cd528e43c264"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000026c0)={{r2}, r4, 0x14, @inherit={0x68, &(0x7f0000000340)={0x0, 0x4, 0xffffffffffffffff, 0xfffffffffffffff7, {0x5b2613d8842ce44f, 0x7fff, 0x0, 0xffffffffffffff08, 0x5}, [0x1, 0x100000000, 0x4, 0x5]}}, @devid=r5}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r6 = socket(0x25, 0x5, 0x0) connect$pptp(r6, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f00000036c0)={0xfff, 0x0, 0x0, @dev={[], 0x3f}, 'veth1_to_bond\x00'}) 05:05:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$CHAR_RAW_SECTGET(r1, 0x1267, &(0x7f0000000000)) [ 2009.189279] tmpfs: Bad value 'p1' for mount option 'nr_blocks' 05:05:19 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:19 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80100, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)=""/133, 0x85, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x20}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) mmap$binder(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000000)={0x0, 0x3}) 05:05:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0xfd04) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffdbb, &(0x7f0000000180)={0x0}}, 0x200000c4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r4, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1c}}, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x2400) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40048c0}, 0x40004) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)) 05:05:19 executing program 5: r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000340)={0x0, {{0xa, 0x4e23, 0x5, @empty, 0xed40}}, 0x1, 0x7, [{{0xa, 0x4e21, 0x559, @private1={0xfc, 0x1, [], 0x1}, 0x7649}}, {{0xa, 0x4e22, 0x20, @empty, 0x5}}, {{0xa, 0x4e22, 0x1f, @remote, 0x5a9d}}, {{0xa, 0x4e21, 0x3f, @empty, 0x80000000}}, {{0xa, 0x4e21, 0x4, @mcast2, 0xffffffe0}}, {{0xa, 0x4e21, 0xfffeffff, @empty, 0x81}}, {{0xa, 0x4e20, 0x8, @mcast2, 0x3}}]}, 0x410) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), 0x4) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000100)=""/183, 0xb7, 0x10000, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e) getcwd(&(0x7f0000000280)=""/132, 0x84) 05:05:19 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x3, 0x0, 0x6, 0x0, 0xc}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r4, 0x711, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x2804c000}, 0x2004c8c4) 05:05:19 executing program 5: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x1, 0x2}, 'port0\x00', 0x4, 0x44, 0x8, 0x5, 0x80, 0x3, 0x16, 0x0, 0x0, 0x9}) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x2, 'wlan0\x00', {0x2}, 0x3}) getrandom(&(0x7f00000000c0)=""/239, 0xef, 0x3) 05:05:19 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x1000, &(0x7f00000013c0)=ANY=[@ANYBLOB="bb9368c865806040906f3580481d008209774447ddf5cf2323cf6fb2f473711f7dec4dbcee0c9180bbfd1126805117cc5fb63ce0fd90ea370b13ef52adba7435f7dfbc64f5f8dcf270ebbdaad0115e83b08894d700343ae5fc0e4552075b065e63f278cad9a1e2ccdc6686cdcdc0eb7ca2226faf4c9a7222aa4961abdf11c1edac7c616f000054ce5cd644c6fd4b2191d062d7c2695996f574a4e1abacc23904a70a"]) socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x100, 0x870bd27, 0x25df9bfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x846}, 0x24044080) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x6) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000002c0)=0x7, &(0x7f0000001380)=0x2) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r3 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x102, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={r4, 0x1000, "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"}, &(0x7f0000000200)=0x1008) 05:05:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x28, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r2, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80, 0x80800) r3 = socket(0x25, 0x5, 0x0) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r4 = socket(0x25, 0x5, 0x0) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x248842, 0x0) r6 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="0d0dacd5", 0x4, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r7) keyctl$clear(0x7, r7) keyctl$KEYCTL_MOVE(0x1e, r6, r7, 0xfffffffffffffffa, 0x1) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x49) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, r8, 0x711, 0x0, 0x1, {0x9}}, 0x14}}, 0x0) 05:05:19 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x109000, 0x0) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x200, &(0x7f0000000080)=0x4) recvfrom$l2tp6(r0, &(0x7f0000000180)=""/189, 0xbd, 0x40000000, 0x0, 0x0) accept4$ax25(r0, &(0x7f00000000c0)={{0x3, @rose}, [@netrom, @null, @bcast, @default, @bcast, @null, @bcast, @null]}, &(0x7f0000000140)=0x48, 0x80000) r1 = syz_mount_image$jfs(&(0x7f0000000240)='jfs\x00', &(0x7f0000000280)='./file0\x00', 0xffff, 0x9, &(0x7f0000000880)=[{&(0x7f00000002c0)="acf2a7948e3da968789a198b2993a65e1c8df57f8d80167bd75194c3aae68e03", 0x20, 0xfffffffffffffff8}, {&(0x7f0000000300)="2aa3450a7612dcf5ade2b33978308a3cc1df57719856facf6ffc062c56fc44260c85c42b15ba727efb961966214f22652514944c9b847a39431c3b6c512bab4cb32c583aff6b27b61fe119041265b2a750a53b82faa6bf5f777add020fe91d3b023bf2c1519b00fc59f2029314b09fde3a8fc4ada66857aba67b64277eee8f29e8c96b6dab666d152d114dc01864107d08eb7bde46526d4493e7f9a8725f8935a70b2d3264011c4d630aeee017fcdc6e34447bb445c4c8929639807e90b207b63f796e0e14c9280df1d9af1238ce2b7ac07f348c0762d3af2b500dd6c624cdb89e82cbf0124ed0581142", 0xea, 0xff}, {&(0x7f0000000400)="630393fd4aff66c5fda158466c4028cd80958b55045057ff032c2851bbb1e6f6c2e1a2a8d652225eb225aa9c481db6a19ffff94f4133bdc5be46d4071372f4a9ff92c7c596015ae3c9fa25ea40f73072ec202ee5feb413a58c0ed172696cf74e5908c34d6091556b53fa0a46daa46f560436d402cd9801950a1d8b18935e400a7d518372cd71ceb03f8a0a5c3caf196a59a75e351bb899230d1efa1472830393b7dee42fd1eb79924bfb4453f173e093fb", 0xb1, 0x1f}, {&(0x7f00000004c0)="4a028278952c4a9f9eaef64d92b5f00049f9275e68807ae6636e745ae2b2e27308ac6a42c8870df710587b8b2d6fa6f36434a1b9858b2417d5671f2270c9d295e47facf0bfda61ea2e90a72af946b95e4ecab19f3c87178d9ba8894fcc3bd73909eb303c6f93b73e44fe2ec31a188b3dc82e814e5a7eea977dccdd0a53ea38d07ce573ff7021a1a45619fb33db5253fbef3c80ae8b80d2923925e124f7d9714910a1c1918bf31dd3ae3271cb183352da", 0xb0, 0x65}, {&(0x7f0000000580)="fa43458ee383854708b9fbe0ee5b30a471c99e2eec0661b22419236c1f37c3016d648b34d18fac6f8251446605dd22977938f3057538c947c89edb3d9323059b4eb2057ea4b1adeca497af638da1cf133f56796aadafcd8505be6b577ee59f9a07e94f25caa1a02733b7221626e33d0e14f0bf0a31d003319434ad3533746525868cd8ed870a04e23c8d3463d176841afb071b193b321e1926b71df13f63067cf3b119da5db53bbdfff61bf1cddc562e3fc3cf4acb8a40bf", 0xb8, 0x80000001}, {&(0x7f0000000640)="07732d51596942ef0083e6864d6b2cf72e182ab05d9e3483f6ca6033ef75ae2b3da85df764704a29f760ef836690832447e9f57bc98f7de1e95f0b89a828b382c9ca1b607b2cdd6d820475e36814bc0a1da1f7b38e20cd64be5b9bdfe7aa71d82f8f5c74c00e752419c323fee7fd5903c848542ff679ed66b2c4318734c3214c8cde7f1446aa33b3c0ed35465670652ca31e5878aff8889013edb49962a39cab41ec838738c761e445c8e8a901586d0cd6998eafd4fedcd74d227bbe841859c6ad14cc282be475b598c8651318a33611ff1f24e9cc5ef5561d203073853e61b662a4e1c98635a192bce46790dd11fd", 0xef, 0x4}, {&(0x7f0000000740)="631b687695d7304bcb882275b1bed436aa02f331b876b8d9e2dd1c771921b68e0afc748ba7fd5cb48b4e68f7ebbf95dc4b2443d12c4a62801dd9258461bc462e22ea657f787c1e0f1ad2f182c12e84b5c0ba517d174acea756769de2555928aaad2cc801ee0d6134f1c75d08dac82f7393ccd4dffc403601a6a5b381e25864fd8e24af9995b6380cde7dfaa1b99e40983b7ef1a6e204356634ec64bf305a3602474166c2b2a12c0e6aa9723101db", 0xae, 0x4cf}, {&(0x7f0000000800)="15664a70d88ae9", 0x7, 0x6}, {&(0x7f0000000840)="6c03c6d1970b6a1e5c43802e1cb42859e11c9291b9b38904f272ac1390d65b88", 0x20, 0x1}], 0x1001, &(0x7f0000000980)={[{@uid={'uid', 0x3d, 0xee00}}, {@quota='quota'}, {@resize='resize'}, {@uid={'uid'}}, {@errors_continue='errors=continue'}, {@resize='resize'}, {@grpquota='grpquota'}, {@errors_continue='errors=continue'}], [{@euid_lt={'euid<', 0xee01}}, {@hash='hash'}, {@smackfshat={'smackfshat', 0x3d, '\xde&}'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xee00}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@dont_measure='dont_measure'}, {@audit='audit'}, {@fsname={'fsname', 0x3d, '/dev/dlm-control\x00'}}]}) signalfd4(r1, &(0x7f0000000ac0)={[0x5]}, 0x8, 0x80000) syz_mount_image$qnx4(&(0x7f0000000b00)='qnx4\x00', &(0x7f0000000b40)='./file0\x00', 0x401, 0x3, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="6b99adafaf883b798e2c1fdf87b8376664f68a973513ecb5e52de34d107847c9af2785849f1cfc46bb312667ef1d832ebd7a25ddfd308a2ce9e9feb68020ac861470c945dba61ab5e818884a69e48ffbcb5bbe9d27d4c3ba3adf44f5a7e599985f0f053e2bb0ce1dc6068e19ec3a619749aa33f34d3b5c1c02691f7039c8d0af26266c01c51db1f97edf95076ff673ce1f491779bb1a1175de45c0a4b3548a57f8f08027e6bd64a59d84ef80a75b05a957a6303dba3d21916d050dcf1455d36737bb", 0xc2, 0xff}, {&(0x7f0000000c80)="8ed9f3cb831af0e9b8614be35ce42d13374b4bb9537f40bfe7a9c6eea04ea9f935fcda89c55a1f968e9b2e7c9f9ed5715353fa23821a46d59c1d45de7193fdb4d503ecea3ecd670d3956ade4f004dd9417ca474d14b1893a5bc37f766cd2be", 0x5f, 0x40}, {&(0x7f0000000d00)="04fc1b3b0b618e22a9281ea238ef78cba3f447ff32825f87e00cd94856344038cb33e8074fa6af7690243114038f98309e9a680bc560e093c5d80049972683bf9ed4e1e9dbfc440130d38b7afad3c79cdad55171c251eecedea194ffd2f6678c2fb36649c0642851c6094af46ace60d60b55cbe3188a458f307d3e3d754373f8320f072a676c6f1cfbebc5b7", 0x8c, 0x9}], 0x42, &(0x7f0000000e40)={[{'{'}, {'/dev/dlm-control\x00'}, {'quota'}, {}, {'\xde&}'}, {'])'}, {'.(\xc5++&!'}, {'&,-'}], [{@smackfsdef={'smackfsdef', 0x3d, 'smackfshat'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xde&}'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@euid_lt={'euid<'}}, {@uid_eq={'uid'}}, {@subj_role={'subj_role', 0x3d, '},:'}}]}) 05:05:19 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$ax25_int(r2, 0x101, 0xc, &(0x7f00000001c0)=0x1000, 0x4) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/136, 0x88}, {&(0x7f0000000040)=""/27, 0x1b}], 0x2, 0x400, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2840, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400200, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000003c0)="295fac22bb55b6d9050de8aebf5d0f5cbc0ad0a770e817edcf816e7fbdcb34d446703a3a9de09b3e6cea45d353a7dd217ea64e3d9eb6981b0c39945bad56cc02fc7b39b772db29a20bc98c52cd92a3c1f1fde2b30e8f603e198eebf85d8c1bf4c708f92b68cef7006a156a9ce14592aa00e826611f98d4a3959e559a93ef54403b7465c9df000d036a3fdc8f4e15dde6ed64c9f4415f11b0e92e5587d07ed6f262dfcfa260a59cae0db8678b2e9aa466a117decd8604d561b6808be4fb72733452a84c8415dc756e7d6f7aaefedd462031e5fbe594768b317462e9a7c1687f50e6bf586e940c7ab5a5a579b48ab3f146bf91") ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x9) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}}, 0x0) [ 2009.804093] qnx4: no qnx4 filesystem (no root dir). [ 2009.839125] print_req_error: I/O error, dev loop5, sector 0 [ 2009.844905] Buffer I/O error on dev loop5, logical block 0, async page read [ 2009.894749] qnx4: no qnx4 filesystem (no root dir). [ 2010.076968] audit: type=1804 audit(1609823119.711:8862): pid=1439 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1724/bus" dev="sda1" ino=15987 res=1 [ 2010.157840] audit: type=1804 audit(1609823119.791:8863): pid=1440 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1724/bus" dev="sda1" ino=15987 res=1 05:05:20 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:20 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) copy_file_range(r0, &(0x7f0000000000)=0x8, r1, 0x0, 0x7, 0x0) 05:05:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:20 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:05:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfd04) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xca, 0x1) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@null=' \x00', 0x8, 'ip_vti0\x00'}) 05:05:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) unlink(&(0x7f00000003c0)='./file0\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=ANY=[@ANYBLOB="24e3ff00ac6687262951e8a42e0770f6", @ANYRES16=r2, @ANYBLOB="05fffffffa00000000000600000008e80300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008090) connect$vsock_dgram(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x2710}, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40014) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000400)={0x30, 0xf0, 0x690, 0x30, 0xa39, 0x7e, 0x20, 0x0, {0x1f, 0x8}, {0x8, 0x8}, {0x8, 0x1}, {0xf6, 0x6, 0x1}, 0x2, 0x100, 0x5c1d, 0x400000, 0x1, 0x80, 0x923, 0xff, 0x8, 0x1000, 0x4, 0x9, 0x3f, 0x200, 0x0, 0x4}) r6 = socket(0x25, 0x5, 0x0) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x811) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000001540)=ANY=[@ANYBLOB="101b53008c39059da6e7b7b23bca4bcc6947a6bd37e8361357588a8d2f05e06dd09c4d78fc1c38ee02a47dd7b10f485b4edb0bef34e2ee53f943e0fe0a307985b46b14be2a79c79e95b4b7fba5cae9093d2c4d266cb3c2d20fc124cc52a4aedf5f1b963a2a6c649994242d759fc9e21442862b06a7de88444d85bdbe01192247ac04b80b0564405e2f", @ANYRES16=r2, @ANYBLOB="00022bbd7000fddbdf251c1c9be20d0003008faafc001f10997d2911f53dfe5ee26c6f58ba6f5ec7fe69c695", @ANYRES32=0x0, @ANYBLOB="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"], 0x910}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x80a00, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f0000000540)={0x0, 0x6, 0x6, &(0x7f0000000500)=0x8}) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r7, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80208}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROBES={0x5, 0x15, 0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x49}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48001}, 0x40000) 05:05:20 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x20000, 0x24) accept$unix(r0, &(0x7f0000000200)=@abs, &(0x7f0000000180)=0x6e) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)={0x0, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}}}, 0x108) [ 2010.801644] cramfs: wrong magic 05:05:20 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000002c0), 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x10081) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="b869398138b4e08b7f473f30fdbfb72747"], 0x1c}}, 0x0) 05:05:20 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) signalfd(r1, &(0x7f0000000240)={[0x6]}, 0x8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0xc004743e, &(0x7f0000000280)='h\x17\x0e\x00\xe2\xb5\xf2\xd8\xa4\x96~\xd0\x83\x00#\x02nz\x19I\xd8\xf34/\xc7\x1a^9\xf5y9j\xa0\b\x955\xd2\xc3\xa6Y\x7f\xdd\xf9\xf6\x17\xef\xd6\x11\xd5e`\xcf\\{\x8b\xaf\xaa\xedt\xe6\xb7\x92P\xa5\x7f:u\xdeh\x04\xaaA\x90\x17\xbd]7\x92M\x94\xd9\xd5\x95\xc7\x14%\xf1\xbb\x9b\xf0\x18\x99\xe3\xff\xb4w\xb9\x1e\xe3\xcf_:\xb7\xda/\xfb\r\xbe\xedTwQ\x04\xc9\xa6\x87\xf3\x01\xb5\x8d;\xb7Kb9\xf8\x87\x85N3\'\xe4\xa3\xb3*\xebm\x06\x19\xad\xd5\xf5U`\xed1\xfa\x04\xc4j\f\xe9\x9a\x12\n\x9eG\x19\x1f\xca}\xefL\xcb\x05\xe0\xb6\x8eg5x\xce\xfa\"\xa0kxD`\xc5\xeb\x8d\xe5\xd4,e\x0e\xbc\f\xf4#$\xd5\x90[\xf4\xc6-^\xad\x99\xe7\xaf\xb7\xcb\x82\xdd\x0f\v\x13[\xed\x15q\xf6\x16\xb7\xcc\x84 c\xd4\xa3\xb6\xfe\xd6A\xd1Cu\x00'/255) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x402200, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x10800) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0xf46, r4, &(0x7f00000000c0)="daaff107b555be6f6e50f98fc3bfac7b03a58758f0eac75f2344cf24a6637d90b6b57d7345a6ed4a81ef1399a85b0e451efab7e61fda001809e5f914e03536cc8daf55e3161fa5e3177efe7f082e3d9baad18dcf35eae6ace8bd4551d8cebba1f55113b633901d227ef793ca8097f0471287b50f527092af730495197ec45132595e0a1fa8cf39dc6c547dbdd8190e97cbcb3950e7f62272f90d8d84e603fbfdd2e49f63b254957041cf8ccd6d630231065bdb0b84aa882ff3f187c8ee80a2f1cfe82e5151dd7bc73d608295ca8df00d280d0874b0c7bb", 0xd7, 0x0, 0x0, 0x0, r5}, &(0x7f0000000200)) 05:05:20 executing program 5: syz_open_dev$char_raw(&(0x7f0000000180)='/dev/raw/raw#\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100a00, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x200}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @loopback}}, 0x1f, 0x100}, 0x90) [ 2010.859977] cramfs: wrong magic 05:05:20 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 05:05:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'gretap0\x00', {'geneve1\x00'}, 0x1}) [ 2010.994298] audit: type=1804 audit(1609823120.631:8864): pid=1488 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1725/bus" dev="sda1" ino=16369 res=1 [ 2011.138873] cramfs: wrong magic [ 2011.146247] audit: type=1804 audit(1609823120.711:8865): pid=1491 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1725/bus" dev="sda1" ino=16369 res=1 05:05:21 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x10000) 05:05:21 executing program 1: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000002e6276ad4b1516d7310d2ee967e7e6bdd3c68e4d99b784f72aeb747b6b11b", @ANYRES16=r2, @ANYBLOB="795f0000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) 05:05:21 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x101, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_LK(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, {{0x5, 0x0, 0x1, 0xffffffffffffffff}}}, 0x28) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x400, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r3, 0x80044df9, &(0x7f0000000180)) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000000c0)={0x401, 0x3, 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000040)) 05:05:21 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) set_robust_list(&(0x7f0000000080)={&(0x7f0000000000), 0xc0, &(0x7f0000000040)}, 0x18) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x26, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd29, 0x0, {0x9}}, 0x1c}}, 0x0) 05:05:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, 0x0, 0x0, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:21 executing program 0: r0 = syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) linkat(r0, &(0x7f0000000080)='./bus\x00', r0, &(0x7f00000000c0)='./bus\x00', 0x1400) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) fcntl$setown(r0, 0x8, r2) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) 05:05:21 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000040)="51687a9b7120841b2598eae6adb020977eacba2e8a63388709778feda78c46e6ac5d1e532b198efa7103cde060cbb6c65fd606b0b1e7c5235cd8e87a65da607410c098ead4de8a73e1b200ef01a4b30836b1802981361c6e152bd3135d5690ebfb7ba1df42d7a0fb1865", 0x6a) r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendto$inet6(r1, &(0x7f0000000100)="1837d200140f29283e6645fbd661564ae6c30b7a6f526517d7254c318b78e931cf013be23436647098529d67ee942f6a8387fbd777362db66bb501f42e8ddaae77d9b7693a334dd0ab08a00241c448bb0689c8830e42efdb", 0x58, 0x4000, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 05:05:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) connect$rds(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 2011.721361] cramfs: wrong magic 05:05:21 executing program 1: r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b000000", @ANYRES16=r2, @ANYBLOB="795f0000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) 05:05:21 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0xfffffffffffffffd, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x600401, 0x0) 05:05:21 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xd3, 0x7, &(0x7f0000000400)=[{&(0x7f0000000080)="05db92441dcec8d3841f5075df07fba19f3c1b3db25d7308de27edc98465ac6779c14ed017f53fb0637b9aab94f9b8ec5c01fda7e2ee291793217b5336bd88fdfcbdf49f2252f9bbbb0d2f4c16ccaaa8de9cdea6adf107902dfc1f2fecb5525a98eef58b3368be97e21be620", 0x6c, 0x3}, {&(0x7f0000000100)="a5a60a9a09a64cddea63359cf7373e3476f260a18a86329d7011486868aa0cd1f6056d775fc0cab6073a924eaf4dc22a09d32d111026fdac1fc8d76db4ef24343d7fcf85", 0x44, 0x2}, {&(0x7f0000000180), 0x0, 0x6}, {&(0x7f0000000200), 0x0, 0x1}, {&(0x7f0000000240)="e2d77f202d74e8b9b8ed0674cc1726fff88ca5f7aa90908ea74c98a99dd8d40775dc9f1df38774aa675b2507897524da36d614778b791d1f89f2023a796bc1d7b394af9b", 0x44}, {&(0x7f00000002c0)="d72a57f01b93b360349ed9860b96489fac8d93c9550cffc05bde1fe6ff29e4d15d603ad421c6e4350a89ab4a5b70e66392a9eb8c6b7ca9b4f1b84615d671a20177bec34f89cc669e4f8b14a8afca607cdde7354f6b7e4a4f935ba5a261e28b8f4fb5a6d728f749a49b23f01c99f1e24aa2db1533071f8f15db917395258e9b718a7174ef4c96bc26d0339d8e9b0c0586e83a5c3d9bde34ef56c29b53537167ce50c1182c1b260fc2f366c6b92f95bf5eadaa1a1f09efce0a29608223a04e0289c5371feebc2cf8309858ff74fcc8e11645da12", 0xd3, 0xffffffffffffff80}, {&(0x7f00000003c0), 0x0, 0xfffffffffffffff9}], 0x2824c14, &(0x7f0000001b80)=ANY=[@ANYBLOB="81000000000000006673666e6f6f723d2f6465762f7261772f72617723002c70655f646988656374696f2c00ada4dbf301b4d3c207688e1d4924356c7d46203e6611ae35580b29fb4d5f161dd238a861ea39db8ad5fe6f7bae6b934c84f3608bc1b84f5acdb0374a7f46ecfcacc692d6564b12a5fd50f8b9044ba9df017c7d9a9a23c87ff78542d8f19b773b6e1c71bcf1c651ff72ba37e28b41bf5a25f57e83faa4537b007d8fe5f023063c8785dce06e69a23886"]) r1 = syz_mount_image$befs(&(0x7f0000000500)='befs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x9, &(0x7f0000001980)=[{&(0x7f0000000580)="6d0b4335e36804cbc302fa0bbf0b10eedc2be4c8e2c048f7b1202d7be916bacc4b8a32a4397585960e392e91c7083d8ca7515b0d3e685b04d4ffd3d02ab2c954aa75ba56213cf2ca50516b21b036019d2197ff871bfaddc4576969c5a88c11998612b77887562c98a1c1", 0x6a, 0x3}, {&(0x7f0000000600)="443c8c1396b4e45a8c2a50318e8745b82787", 0x12, 0x2}, {&(0x7f0000000640)="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", 0x1000, 0xd9}, {&(0x7f0000001640)="bd313e7e8b95f4be3a90a35231f9caf9217abc341ea1d68b53a7b6e3d970871fd9812b4c27db95ea2b31503c9d2bcc45f9b43a2a53d6535de785a312583320f87ab1f6e3753663c184e0f3f6ef0064c4ddd3a0bbbb6ad07274abe05104285aa0fcb462375ca12ba44cb165e54f834d54961be003e08236c7d721cf67a494242b26a9763c05c76f8b7621e2cdfb36eebca1a8a2f9f4657e590a4a0ac7898f2c1211de6a4e20da8c994429a409cb3d068be20f832bb1d5c817d66885ed8190d1e25b7b2ac88f01537a175be5a3facf7bea7d76713054e5586227ba2838179cb6f8450034df4f0f812d35", 0xe9, 0x1}, {&(0x7f0000001740)="c4e396d2c66b136bf9ef1fbd54e25f50b908138516370d6860", 0x19, 0x9}, {&(0x7f0000001780)="2b18905928b56dcc66123032f097fd26cb84b1fc804bf0868611b000cb6530b8cbb402ecda55d572cafff9274d5c8a9562682dae1ef5193500a0caaf6afd4850b567d8a75dadece78ba76f57d760355d1b4804ea51582ef4cc4520ea81cdc1d6b589ba997791c1d1343c981ff5a3b0c31407aec97bed2190aeff271f2974e6f559441fb6a64e4bea23", 0x89, 0x4}, {&(0x7f0000001840)="e8ac2349c502058e5a23ac99c84ecd0c04cea182f3497df202abe9ad5d01036eddaca9d83285", 0x26, 0x10001}, {&(0x7f0000001880)="0c9b51cd9bfa71f22570e26fe2af072fb658b9dca6f39d5484f19dd90baedabc6e26cdf68280", 0x26, 0x704}, {&(0x7f00000018c0)="5bb40244fbefb783a95ef0efa456246f5b0f88769adf8544ad9741aa3a9aab9a215ecdf889754bcce9bb1b6362935941aaaeb4aaaa9d34e8c9f624e34f4bfb35c36ca802f1a870b4b5bc36acd173724d5f7b9732ec27041dafeab02a38ceafe60581f3e6633d516c26782ffaa151a25957d8d87d238b27e4829b8328fa5a09ed9a57e1d6e2750c7bec028478354bc1e9aa774f31029fce4b081552118052496d60a64f2795ec0a10d0cb1744118793aa09fa8868dfb396747a393b74b0c2", 0xbe, 0x1000}], 0x2, &(0x7f0000001a80)={[{'/dev/raw/raw#\x00'}, {'-^#:+'}, {'/dev/raw/raw#\x00'}, {'/dev/raw/raw#\x00'}, {}, {'/$/,,'}, {'/dev/raw/raw#\x00'}, {'/dev/raw/raw#\x00'}, {'[}'}, {'/dev/raw/raw#\x00'}], [{@appraise_type='appraise_type=imasig'}, {@fowner_lt={'fowner<', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_lt={'fowner<', 0xee00}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@appraise_type='appraise_type=imasig'}, {@subj_user={'subj_user'}}]}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000180)="99e01aece07c92e43d0bdecb62b0", &(0x7f0000001c40)=""/83, 0x4}, 0x20) tee(r0, r1, 0x0, 0x4) [ 2011.826988] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2011.897974] audit: type=1804 audit(1609823121.541:8866): pid=1563 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1726/bus" dev="sda1" ino=16369 res=1 05:05:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = signalfd(r0, &(0x7f0000000000)={[0x6]}, 0x8) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 2011.987998] cramfs: wrong magic 05:05:21 executing program 4: r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x80}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x2c}}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x40107447, 0x20000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x4000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000180)=0x7fffffff, 0x4) 05:05:21 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 2012.084213] befs: Unrecognized mount option "/dev/raw/raw#" or missing value [ 2012.097820] befs: (loop5): cannot parse mount options [ 2012.107963] audit: type=1804 audit(1609823121.611:8867): pid=1569 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1726/bus" dev="sda1" ino=16369 res=1 05:05:21 executing program 0: ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000040)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:05:21 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x240, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x6, 0x70, 0x0, 0x3}, 0x0, 0x0, r0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x40107447, 0x20000000) [ 2012.209748] befs: Unrecognized mount option "/dev/raw/raw#" or missing value [ 2012.230462] befs: (loop5): cannot parse mount options [ 2012.280067] cramfs: wrong magic [ 2012.366125] cramfs: wrong magic 05:05:22 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, 0x0, 0x0, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:22 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x0, 0xa0842) 05:05:22 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x6c0503, 0x23) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x8001, 'syz0\x00', 0xfffffffa}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf1d8, 0x70}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0xffffffffffffffd7, 0x119, 0xf}]}, 0x38}, 0x1, 0x0, 0x0, 0x8014}, 0x4) socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000200)) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x238, 0x12, 0x4, 0x70bd2a, 0x25dfdbfe, {0x5, 0x3, 0x3f, 0x8, {0x4e21, 0x4e21, [0x8, 0x7, 0x2000, 0x6], [0x401, 0x8, 0x9, 0x692a6dc9], 0x0, [0x1, 0x1]}, 0x4, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x46, 0x1, "e583cb994de1f1bb4ba3130918910c3bbd229313c862576e0604949a44551da5c0223632e972c952e44d8d514a54e8a5e16b6d5770a58d14fded012e45c5e8d1579f"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, "06"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "017ca1ab8eec1cca5406d1d604efd68bb80c30f22eda57fe830a6a382e06c06800a734fdb13a932c1381224ff3d1ea109d327f27404cd2c45946789013009b14f567edfc8e87d89abe2c25f37bbce0c905437bbddd9317ba0e74a91fe7655957a185c9e23b05863a969dbd8b528d7e6b31817620a8ef35c0b4a03fcb807508428ddf441472abceaef9d7c372c45e8fdb2eb7ff4449b2a2680a0846de528f9d69aa092e5f62cb338849b7004ab306e6545c5048dab53050b5e249845df519530dad"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "8268ee109c5470d0f399719c4a67234a404f6dd9e05f122ee1ab796798d1581baa063801f8c0160be7b95eadba98afe7124466eecf7745fdf25f7b512454b7af11d914d801d78e761e0a7ce820fde63c59c43bc6a4f7497393ba22b365ed2b261bd6b317bfe3c368f6db705dddf20c30b7b1bd8676478ed906323716c3a16f125db1b5e131ce4d431670ef13ec7f851316048d17"}, @INET_DIAG_REQ_BYTECODE={0x3a, 0x1, "ea184c0e4b2ced987daf4e1a5cb2fc461bfc19aa95e58dbc1f49227372fa46bcce0e0cde72ff69ff6408760e4c2b8eaa520a9feda46b"}]}, 0x238}, 0x1, 0x0, 0x0, 0x46}, 0x24004000) 05:05:22 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x8, 0x0, 0x1, 0x1}, 0x8) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x1e4, r2, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5c}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x10, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa, 0x20}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}, @NL80211_ATTR_IE={0x185, 0x2a, [@cf={0x4, 0x6, {0x1, 0x0, 0x4, 0xff}}, @ssid={0x0, 0x6, @default_ap_ssid}, @random={0x8, 0xcf, "e8059e91d042e1d87e17f844681892c33204a419a3094b3e9185d3e3d7deab21df542adc04db172e01561d801a1304299751182e910adc744ac92bcb8410e661d2f11f0c6a1fa03ae6de43c4972fb093c3f04953f967763670475e6a3b3f84bf0aa616bab6f29e50770bf0d289f8e25fdebd273ad8ed92accee362d35ab1dbfb35b115ad22beddc29009cdb069465802505762943bdf634821300fc90794a676fea6362384499958442ce7a33d8a069ea0abd5d6db9a3d1a6ef0ea90fb9a09bd700be072c4b8a9eb2fe7b1128cc076"}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @supported_rates={0x1, 0x6, [{0x2}, {0x16}, {0x11}, {0x48, 0x1}, {0x46}, {0x16}]}, @random_vendor={0xdd, 0x2e, "4a1923fc59817615651d64a33b76d38a2b5c10b134b29b38105d7d008199ca0b6c3985220e1c8a7ab88dae172291"}, @measure_req={0x26, 0x23, {0x9, 0x7f, 0x6, "ed9192964264e75827fa6959ddf6aad425eaa46e4f3ff3c84e7ec06badbebd61"}}, @cf={0x4, 0x6, {0x8e, 0xfb, 0x3ff, 0x7fff}}, @prep={0x83, 0x25, @ext={{}, 0x0, 0x90, @broadcast, 0x9, @broadcast, 0x91a, 0x480000, @broadcast}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x1, 0x1, 0x7ff, 0x3ff}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x5) 05:05:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x202, 0x4000000000dc) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c2000808830d3a6d6278593e2ae9a4b5a3f1e9a3ae12a4a1814d04bad32a326400d09ef28b08762de6a29bac1f068ef55773e37d9a419729ac12ecd2505b593214fe89e845ff643b46a873c0a88b5065556b478791f190b6058659a0ee4b2f89f12ce7f8e3df8d28ca4e55ebce5cad461784de170724c412196dc45e892d1c04988019b8d69f33156e2de93a8b215cc2f7ebbd212ee5dbad68556c239ff38e9ee9f6671afc459dc5a70454188925d5b52a34d02c8793a8fb4f7eb74ebb5e6bf9f2826e3174fc9a6353a15c0f3f74b6c0fa87b7d16ad2aa72c52b58ec6656444ca78d5aeffdd5b6174c6bbaab46080e876cf775eb07a", @ANYRES16=r4, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xa4, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x5804) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="77ef1145551a63270e754c6515877b66c07fed25d36597eaf12f103484369ad7949807c61945531252f19b904b6e4e20eb66d570e07f0629aeb0ee849ad8ee205ec0147fe417b662df95657e62d91c17e199ace6b6dece0202363404226f1b66a8a1fb23d5cc5be35fa3b30600000071869d55af2bc7a50de4bc0356b5700faa96fd8d07046ebccfa534e025f90bca5c9cbbce2b7d11bada9ba462d8f5c722", @ANYRES16=r6, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) 05:05:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="c983eab3b6080005"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x28, r6, 0x5, 0x0, 0xfffffffe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x71}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r3, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x40080c5) getsockname$packet(r1, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14) r9 = socket(0x10, 0x3, 0x0) r10 = socket(0x11, 0x800000003, 0x0) bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r10, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001980)={&(0x7f0000000ac0)={0xe94, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0x0, 0x1f, 0x80, 0x2}, {0x4, 0x40, 0x7f, 0x200}, {0x3b, 0x0, 0x3f, 0xedc}, {0x5, 0x7, 0x0, 0x5}, {0x2, 0xee, 0x3, 0x8}, {0x7, 0x0, 0xfa, 0x8001}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x4d35}}}]}}, {{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4d5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x932}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x8011, 0x1, 0x4, 0x7}, {0x8000, 0x6, 0x38, 0x3}, {0x83, 0x0, 0x1f, 0x4}, {0x8, 0x8, 0x16, 0x8}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xb106}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6b}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x7, 0x1000000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x0, 0x7, 0x7, 0x2}, {0x40, 0x92, 0x6, 0xffff7a7d}, {0x1, 0x2, 0xff, 0xfffffc01}, {0x593b, 0x80, 0xcc, 0xf0}, {0x401, 0x7f, 0x5, 0x74f}, {0x0, 0x2, 0x2, 0x8083}, {0x3f, 0x40, 0x6, 0x3f}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffc}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfbc1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4e}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x50000}}}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20bfd64d015e919fe178e5d973d4145a0dff5b5199a510dd7e82b471f503b44e5174a9683a617acdb5dc1914ef25b88dcc425dfe047f62616839ba0e25139d8112122a17594ab0c273a518b143127117628d607f8810903486cfa9afd4c198dc171e17fb6c523ba482c19a1e16a6", @ANYRES16=r12, @ANYBLOB="795f0000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) 05:05:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x418e}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x24}}, 0x0) [ 2012.619385] cramfs: wrong magic 05:05:22 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x6, 0x40103) setxattr$trusted_overlay_nlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'U+', 0x1}, 0x16, 0x2) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000540)={0x1, 0x7ff, 0x200}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000090) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x7, &(0x7f0000000740)=0x7, 0x4) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0xfd04) fstat(r4, &(0x7f0000000580)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="24000600", @ANYRES16=r3, @ANYRESDEC=r0, @ANYRES16, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000080", @ANYRES16=r1, @ANYBLOB="a8f029bd70a0000000080803000000000000", @ANYRES32=r5, @ANYBLOB="1400fe00dcff5ca2ae5b3a67f9acc3b86855e8310a00060008021100000100000a0006000802110000010000140002010d9d473f71e00acba14345b69bc95cf7140002010e4ace628d3f76a5122a351549c816081400fe00b4957070bd658b837d0c6a40ee79cee1"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000780)) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, 0xffffffffffffffff) 05:05:22 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, 0xb, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x100}, @IPSET_ATTR_ADT={0xbc, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_bridge\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffb}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44001}, 0x44) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000080)=0x200385) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x8, 0x3, 0x9, 0x2, 0x8}, 0x14) [ 2012.661013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 05:05:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0x9685, 0x0, 0x200, 0x7f, 0xffffffff, 0x0, 0x5], 0x7, 0x2, 0x32b3f2cd, 0x100, 0x4, 0xfff, 0x2, {0x1000, 0x28, 0x7f, 0x6, 0x81, 0x2, 0x7, 0x4, 0x40, 0x1, 0x3, 0x5, 0x81, 0x1, "8a7b4383292d568d4b2c6df69ec0cf0da6a88a5ab405648df9b446742cc9d31e"}}) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 2012.770462] cramfs: wrong magic [ 2012.785012] audit: type=1804 audit(1609823122.421:8868): pid=1653 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1727/bus" dev="sda1" ino=16754 res=1 05:05:22 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x800, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./bus\x00', 0x1, 0x5, &(0x7f0000000280)=[{&(0x7f00000000c0)="3bbf686e84d32af20b34d989427126bc7201a8", 0x13, 0x400}, {&(0x7f0000000100)="7ff725c99807d2eb79a2f41a832839915d9e3786fe70459b5b6e", 0x1a, 0x1000}, {&(0x7f0000000140)="7f04b175540490cadf6e0395e2ddac2cef7a685e794ef6c2678e62dad9a8f44607f8496109f8d0dce6246c03e06e99facc052ad25d23426b3a3143c6a36d201c8985a7997184e853fab721bfb9c5154355aa498d5a02ec1a8560131e277abe6288c614ad91c4df997a38b891e6b0758a7ac14544c2843e76801d101a1efc1f3059f9ea8238ef77228f89", 0x8a, 0x6}, {&(0x7f0000000340)="22e2a57a374d7612fc9a6de028d3a3b855e178e2cbcabf2077253edc1b52084c80d47895fdc63598d03c75c2993019bbafcb6ce3555151a3cda626ce01f0433ac5707103a69531a8f38ccea395aeabacdf801d32e4a2cb88c3ba83481dbc865c0e6d5eb15ba8ff7a8c69375a7eee31cdc962589ec356d7c0063602e380124af8cf44a43da38350358d2cc1f721394c3b78d7e77cb3c0a7d4e5e349a24fddca5d9090c99d87dce3bc", 0xa8, 0xfff}, {&(0x7f0000000200), 0x0, 0x1000}], 0x40, &(0x7f0000000400)={[{@quota_account='quota=account'}, {@noloccookie='noloccookie'}, {@nobarrier='nobarrier'}, {@noacl='noacl'}, {@quota_account='quota=account'}, {@lockproto_nolock='lockproto=lock_nolock'}, {@lockproto_dlm='lockproto=dlm'}, {@quota_on='quota=on'}, {@discard='discard'}, {@lockproto_nolock='lockproto=lock_nolock'}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_lt={'euid<', 0xee01}}]}) 05:05:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfd04) fsetxattr$security_capability(r0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x32, 0x81}, {0xde, 0x7}]}, 0x14, 0x2) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={0xffffffffffffffff, r4}, 0xc) r5 = accept(r4, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000300)=0x80) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14, 0x80800) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f00000003c0)={r6, 0x8000}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8800000001010102000000000000000001000008001540000000011c001080080003400000000508000140000000050800014000000001406de3000e801400018008000180000000000892e8548222fe77129fa00002000a010101060003400002000006000340000400000c00028005000100880000000c000280050001002100000008000340"], 0x88}, 0x1, 0x0, 0x0, 0x2404c8d1}, 0x4000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc004743e, &(0x7f0000000680)='&@[\x00') fallocate(r1, 0xc, 0x8, 0xe15) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x40107447, 0x20000000) [ 2012.955108] audit: type=1804 audit(1609823122.501:8869): pid=1660 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1727/bus" dev="sda1" ino=16754 res=1 [ 2012.992145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2013.037664] cramfs: wrong magic 05:05:23 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, 0x0, 0x0, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:23 executing program 1: ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:05:23 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x7fffffff) 05:05:23 executing program 5: r0 = syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000003000)=[{&(0x7f0000002c80)='*', 0x1}], 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x1000) 05:05:23 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000600)=""/120, 0x78, 0x1, &(0x7f00000006c0)={0x2, 0x0, @local}, 0x10) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) read$FUSE(r1, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x4, 0xee00}, {0x2, 0x2, 0xee01}, {0x2, 0x1, 0xee00}, {0x2, 0x2}, {0x2, 0x0, 0xee00}], {0x4, 0x1}, [{}, {0x8, 0x5}, {0x8, 0x4, r2}, {0x8, 0x7, 0xee00}]}, 0x74, 0x3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC=r4, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRESDEC, @ANYBLOB="2c7375626a5f747970653d2c646f6e745f61707072616973652c00910b8b"]) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x5, &(0x7f00000002c0)=[{&(0x7f00000000c0)="2aa5925385e6b43d799a7b9528b7333b778b7cf54054b9c327152e6d36dedaec4e3888606e3833d1e975c3fb1fe18b31e1a2e8a752cc8f50a46f1e301b9f98fbcca309ce7e1a75c2bb26775512e0c52641f38614a07931eeaa2aad157e7695aeac171d1787d4b10b081bbb0ee5e3e7997728f279c2c99dd6db4a331e37", 0x7d, 0x9}, {&(0x7f0000000140)="4c722417ee755754ff5dad33ee6443cffb45ce1835e65f1f27e42fdedbd42a007da78d75f318a726256e95141578bce484dad066ce9df89b594f806aa3a84e6628fbcb619b8a066bae30c5fef03b20fd824818aee0ff37636045288a2499dc84b4ed04ba4c1d60462788", 0x6a, 0xd880}, {&(0x7f00000001c0)="de8262b1ce5e3517511fcaebdc0f261d986242130ca808b76b40f4f0fe776be8881d3f7a42a69d3efc67b4d491835ea652c3822c9724c1db911e647cb1ed58cfca490a2e5f", 0x45, 0x9}, {&(0x7f0000000240)="56b3122c09f188ed91a565fdf9", 0xd, 0x20}, {&(0x7f0000000280), 0x0, 0x8001}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='resize,integrity,iocharset=cp863,usrquota,resize=0x00000000000003ff,gid=', @ANYRESHEX=r2, @ANYBLOB="2c75737271756f74612c756d61736b3dc0e3300600000030303037a37ffa30f91b596666666666660101756d71736b3d3078303030303030303030303030303130312cec94eb42666f77", @ANYRESDEC=r4, @ANYBLOB=',\x00']) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f00000005c0)={0x6, 0x4, 0xc5, 0x6}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, r2, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}}, 0x0) [ 2013.551410] cramfs: wrong magic 05:05:23 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x9, 0x3, 0x0, @empty, @remote, 0x7800, 0x20, 0x0, 0x8000}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:05:23 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000000c0)={0x0, 0x5, 0x1, [0xf6b, 0x400, 0x80, 0x80000001, 0x9], [0x11c, 0x1ff, 0xcf2, 0x10000, 0x4, 0xffffffffb3e84054, 0xffffffff, 0x1, 0x5, 0x7, 0x7fffffff, 0x7f, 0xe2, 0x1c4, 0x8, 0x7fff, 0x9, 0x5, 0x9, 0x7689eef3, 0x8, 0x4, 0xffff, 0x100, 0xc8, 0x1, 0x7fffffff, 0x100000000, 0x6, 0x0, 0x80, 0xbfdb, 0x0, 0x200, 0x7, 0x9, 0x0, 0x10000, 0x7ff, 0xb1, 0x8, 0x7, 0x7fffffff, 0x790, 0x20, 0x7, 0x2, 0x3, 0x1, 0x640, 0x2, 0xff, 0x8000, 0x91e, 0x8, 0x1, 0x2, 0x0, 0x101, 0x1, 0xee, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x7ff, 0x9, 0x7, 0xff, 0x800, 0x200, 0xfc3, 0xc32, 0x0, 0x200, 0x1000, 0x3, 0x100000001, 0x4, 0x3, 0x9, 0x1031, 0x6, 0x4, 0xfffffffffffff001, 0x6, 0xd55d, 0x6, 0x8, 0x3, 0xfff, 0x5, 0x20, 0x4c30, 0x8da, 0x3ff, 0x8, 0x2, 0x1, 0x6, 0x4, 0x5, 0x400, 0x7, 0x1f, 0x5, 0x6, 0x5, 0x100000000, 0xba2, 0x4, 0x101, 0xd788, 0x7, 0x6, 0x5, 0x7, 0x3, 0x8, 0x0, 0x7, 0x1d9]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@\x13\f') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:23 executing program 5: utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0xea60}}) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) 05:05:23 executing program 5: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x200000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2d2002, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b8, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1c}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc00000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff8000}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x79a9e69d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x52}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x69}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0f6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5b8177ea}]}, @TIPC_NLA_LINK_NAME={0x5a, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20044010}, 0x8000) [ 2014.108895] cramfs: wrong magic 05:05:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = semget$private(0x0, 0x3, 0x1e2) semctl$IPC_RMID(r2, 0x0, 0x10) semctl$IPC_INFO(r2, 0x1, 0x3, &(0x7f0000001f80)=""/4096) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f0000000000)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r4, 0xa89b247b189e6b27, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xfc, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4496}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xb6f9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc000}, 0x11) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0001000000000000001d13000000"], 0x14}}, 0x0) 05:05:24 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}], 0x5, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:24 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$evdev(r6, &(0x7f00000002c0)=[{{}, 0x2, 0x1ff, 0x1}, {{}, 0xa, 0x9, 0xffff}, {{0x77359400}, 0x1, 0xcb8, 0x1}, {{}, 0x1f, 0x3f, 0x6}, {{}, 0x3, 0x8, 0x2}, {{0x0, 0xea60}, 0x6, 0x2, 0x1}], 0x90) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r7, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={0x0, 0xffffffffffffffce, &(0x7f0000000500)={&(0x7f0000000000)={0xd, r7, 0xaf17281e9c402839, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0xa000) 05:05:24 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:05:24 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) 05:05:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200022cec1b601e2a68f35daac358913bb1dad6a08a799486103c0000083fb1b9521ed030055e279fdfa3ba5f494e3f1407f9ad85791643a9eb415dca746996cd95112a6ebe6a6abe391860a314b3b76e1893942797867b1277bd6691616c42b18304478de1ed957978aaed3dcb2ecb92d4d9af9cc5e62547a0c9105ab0c8eec4932e96e447e760c50efdf00a26bb03ed36f20df9457196e9ea62ba0d9f11f9db41d5b782e64b22f6d89dc449b02816dfa6ec74db29569e135fe52cf1406813be905e3df0959f659d99cf66640984e56d8c0d05b09ba8dd7944b451a589c6f3b4126d08949f1314a74298afb3f805fe518753746426a2893", @ANYRES16=r1, @ANYBLOB="795f0000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) 05:05:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x731, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) fcntl$dupfd(r0, 0x0, r0) r4 = signalfd4(r1, &(0x7f0000000000), 0x8, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x20, 0x0, 0x1, 0x4, 0x7}, 0xc) [ 2014.592227] cramfs: wrong magic 05:05:24 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x40, 0x5}) accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80800) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000200)) [ 2014.649987] cramfs: wrong magic 05:05:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x14) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="004e3b63cd5244197cda41a045ea1a60af8c5f5be7010fd895646d10249cf30e2075a07d18ba2b392aa89e9c1bc1461dce93"], 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) socket(0x25, 0x0, 0x1) 05:05:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8282e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80000000}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x282000, 0x82) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000040)) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRESDEC, @ANYBLOB="2821cf4b5d2c7375626a5f747970653d2c646f6e745f6170707261697365"]) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC=r5, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRESDEC, @ANYBLOB="2c7375626a5f747970653d2c646f6e745f61707072616973652c00910b8b"]) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x84000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno'}, 0x2c, {[{@fscache='fscache'}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@mmap='mmap'}, {@dfltuid={'dfltuid'}}], [{@fowner_lt={'fowner<', r5}}]}}) close(r2) r6 = socket(0x25, 0x5, 0x0) connect$pptp(r6, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f00000000c0)='@:\x00', 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x40107447, 0x20000000) 05:05:24 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) [ 2014.810166] kauditd_printk_skb: 2 callbacks suppressed [ 2014.815642] audit: type=1804 audit(1609823124.452:8872): pid=1808 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1729/bus" dev="sda1" ino=17043 res=1 [ 2014.941892] cramfs: wrong magic 05:05:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) vmsplice(r2, &(0x7f0000000740)=[{&(0x7f0000000000)="37995a5859ceabed12c4d4656d133b1c768dbf4d5fb345a02f2efe1a6b117a5c86928233d44be97085524f62ce82567c2a5217752784b02de8744622a7e57be1987271d36902ad8964ebe36b09a2a5d0798edf50860e7d29614bcdb141d5f946bb7c975d81028c397e5880c54eeb8722de674d35badcbd4bd12c353a99a443a78a6af1a7326b7453a06704d0630450ea9621ee1c8b704d1289636c85ab3870504f9c", 0xa2}, {&(0x7f00000000c0)="551cd4a88b4a", 0x6}, {&(0x7f00000001c0)="1d", 0x1}, {&(0x7f00000002c0)="e2cd54d8a524cea0364fc415bc7bb7c8102c980b3d6a7b6c65b0a2370a2a4945d44b4e164096093837e37bb03c715634f5039709ac05955b7e9a6a03b63b23f68f17c864354e02d22fb6ac0cd705af5c8c9fd7a3bcd3c37095692a5eba32a1826e9487de", 0x64}, {&(0x7f00000003c0)="a9bbc9b14ba17f9cb3afc88c79e3d5a1bb8e0d5028ab5da08f030217ab746787e1f7e05aaf225110177445e93b73b3713c62d6fe5e8b23393fec93e9bbd23445e1f616738f7ce52baf86b88054d8bfab41fb1dc9330b20603c3679a4c8c1b06aae105c743808d9c3ec7f922d4ed1b53286be880736fa94174e36756967d754ef65445d806f1acdeb525eb7c4d7a9bfb4613f1f88ffd91042ccb588b96e412534cebd894c4d4afc8b51a252ee2b101d50d54804586d1b6e136dda120ec9340aeee7934f00fb8dcd5b34b199472f84e18c9fb4ad52fb3f7d62fd4dc5ec88aabaac7702eca8ea2c7a93f905a621cb15fe1b2b073adad671451d33", 0xf9}, {&(0x7f0000000240)="0c8b96c655e8e3a58e2b0d77bbfe49d5", 0x10}, {&(0x7f0000000540)="775a5848290d33a28f754814359d9d7fc8afdb04adce406589dab9aba1b3c735aea4b08bc358ea7223d493b7b30938177fbc7df7024901c2bd9497456295a8e4f81a476329afabf273eafde66bc5f407eea95b662f439091b3e3700ac48d394603ba10dedfcab5322cda62a717de7bb92a79a9656e831792078821a07716", 0x7e}, {&(0x7f0000000340)="d3d04eff2540935ccaa2e5c642010a0a821381f48145948dda2a378b45a8c07eb5940c75d3702964d9865c2fab76e149860fe2a89c14a5d805150c7d821cd4", 0x3f}, {&(0x7f00000005c0)="f65351e524ef4a513d0a95410e44f82460e6c34c8e1a3b6c531a095d5246f72f0ceec66c96de75c65a7ec6efe49e527acb509652280d2e5f590f4d7707032b058b1bb0b974524b064d5f15be2eb7ae3dd4f9667e89d78478df1ee2a233db464a4507630a635c18f2810fd702c908dd5b5d979a5d9aceb0746b5b70ddfb871526a855bd7ca3442c281f24f7f1a18eb4e4f8afca2e48a622b289604f9b96c37db7ac8edba03121b6e587b638f5c028fa9b6b8e021cc64aa120", 0xb8}, {&(0x7f0000000680)="92ecf68c4fa7c4f9a751d1f31c0a5b4a4b361d36e944de7b0b6b42e38323399f02ac4b059fdcb400a2a6d1c354ceff4cf6136e8e1108447ead3315e36bb4aa0061a968070e1718a3302bf40f7a7e7354d60c39b65039666d1ed0764d021515b354f5708418ad5fbfd38f5bcfc326c25b2f922103807c5a38c2f7e880c8b5858fe340b9e756d2396b0465", 0x8a}], 0xa, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r4, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f00000004c0)) [ 2015.210685] cramfs: wrong magic [ 2015.223045] audit: type=1804 audit(1609823124.502:8873): pid=1812 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1729/bus" dev="sda1" ino=17043 res=1 05:05:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:25 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}], 0x5, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:25 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./bus\x00', 0xffff, 0x5, &(0x7f0000000280)=[{&(0x7f0000000080)="6ee74a074371308d2f35d38239e9590981ffa15cd024c0add052708ad4b60718b8a1c97974236bfdcbc221ac1ee36423c70556deb69c38022a2fa6dcfceb1ad532a3f8a03571e5d1afd02f77bbd500cd35213953a88fbbf28303a7d83d46e7549460e81374cf2f94d195937764bf1e9a9e762163b88a5425b09bf84aafb083ebd4bf61aafe8baf3dd0f0003d1d0f8e591fcfb1e629fb95cc4d73d3516e2419f89624a64ce997cfaeb80ee4ebf6293b59bf427669e9380a4bb113f3d53e59532673861631fa49ee1b85", 0xc9, 0x1}, {&(0x7f0000000340)="ec3ff783d01c555cda319785ed8edf4680944e2c84114c961c63cedb8f6789975b1da8252338bbcabbb47121ac4c7aa48564d5f35c1e0fb3d78bb717ef6687cca552a40b53d2d3c3c3bcface69093780058db6fa17b3980c3a1763472aa7f2b0d04114f73f18de76b725bec02394aaa2cbb177e86808694c8291842d17cd8a2538157a66f0540720d72ce04672a013933461ae9870e840f0da8730c46dd016362456b34cc6ac85ae60d26ae9818599096b1c1aa07440f72143c58336d2c0038d693c3b41a91fc5f5f28666907b66063812556726831f60", 0xd7, 0x9}, {&(0x7f0000000440)="415751212a3a364aa2ce9a0c90fe90597a3c68266093dce615028ba6e12b765f645367a75e64041cc7d5cf426867ad2c1cadef022d7d560239af737cd44fbb90d3b14800d6bf2d31d8174143e9861341909a65d17a138bda3b2311b172ae42ed1d3432f2a49b9a5ae7a9287eee1c7a6aaac7489bb9890730bdd38d7f48310feb34f40d2bdac5632dbdb1e1476125921f7fbf2368388bbbe89b46ac60f922bd145966a2d92a4c55cd022aa709f021175d96f90c821dbdd720e23755abae192fcca99492d6bd7fbc319610424b12047a75e8cfd7", 0xd3, 0x6}, {&(0x7f0000000180)="70827e89cde5a8600fc2fbd03cac432151e9a17f22ed95363061dd71b28ef075c622fd21657b343c5a4ba80fb63e11e36bc10403dee828d6b83a349f0a66de73632e83f5bdaef319b28a89181e310bc69e", 0x51, 0x7}, {&(0x7f0000000200)="13c8515cf0b45997c6cf7f85773b85e95679ebce862347cd4273d58869d6ef4cc057fce09026262fdfb04e9a5008db3a634c9625ed37000000", 0x39, 0x7}], 0x6000d, &(0x7f0000000540)={[{@noquota='noquota'}, {@noinline_data='noinline_data'}, {@alloc_mode_reuse='alloc_mode=reuse'}, {@nolazytime='nolazytime'}, {@nolazytime='nolazytime'}, {@four_active_logs='active_logs=4'}], [{@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}, {@audit='audit'}]}) 05:05:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x268, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x164, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85b3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa8c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39c440d8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb438}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3eb1}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x257b18d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb402}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd35}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x717e891c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x494b5282}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b73f27f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x153e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2773}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74c147f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bf64509}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6908907d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e4868af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfbf8}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20d2ebc8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34e9fa24}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x741f3a11}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7afde727}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3797a7db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ca426e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2fdb}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d81bb28}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78119041}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16c7bebd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c17606c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7aa4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f2b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd4e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd5c3ac}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5750}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd97f}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x5c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x170fa86}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x153b88c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b934dc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72a79593}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73ed9de2}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x7c, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c0da676}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8010}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ae9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65b7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45e71f76}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a4edd58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x68ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9921}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf062}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3081}]}, {0x4}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc64a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a5e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x268}, 0x1, 0x0, 0x0, 0x4}, 0x20) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="7c61bf144c25d51ef40f18353308e07bcd8eb58478e789cb5170f9cc3680caf35e4375fd46497668fce7fc0e06e26dbdbdee36e726fece63469e81657acf412a0cda61873b7d6ea365d9855ec378743f9ade58d4551aa212a9748352f0c5bc64e562397f788a839325ba8c22116da0032f4451649912f38a6e7e553fcacd7f6df1efe92e"], 0x1c}}, 0x0) [ 2015.661733] cramfs: wrong magic 05:05:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x3, 0x4) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfd04) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x10164, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) getpid() openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x40107447, 0x20000000) 05:05:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) shutdown(r0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) [ 2015.850353] audit: type=1804 audit(1609823125.492:8874): pid=1858 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1730/bus" dev="sda1" ino=15849 res=1 05:05:25 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) socket$inet_udplite(0x2, 0x2, 0x88) setresuid(0xffffffffffffffff, 0xee00, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1c9ec0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={r2, &(0x7f0000000180)=""/24}) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x8) fchdir(r3) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(0x0, 0x0) ftruncate(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[], 0x208e24b) sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfd04) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 05:05:25 executing program 5: connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'erspan0\x00'}}, 0x1e) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = socket(0x25, 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x184, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x494}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99ae}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40040}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000500)={r0}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000020c0), 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x1c, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r6, 0x200, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x401, 0x0, 0x80000000, 0x8000}}}, ["", ""]}, 0x30}}, 0x2000c080) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00c36b0518a49a701f000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4018005) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xaf3e, @link='broadcast-link\x00'}}}, [""]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x2) [ 2016.022284] cramfs: wrong magic [ 2016.023055] audit: type=1804 audit(1609823125.562:8875): pid=1859 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1730/bus" dev="sda1" ino=15849 res=1 05:05:25 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00458031639d80cb18fcdc7276e0612d419b6dd9829c16270a4ca189456412d109ad5d94af9f147b300b50121449154d4986bff7e63f4b9142722fb1acc16eb577df461e38c5f954e0a8e9d0106cfbad6eb6f8a32bb71929ff0100000fb6e236ad1d68f45ee4c7e5d0495ac9089885446ed09e2080e275e562062ac748a3b1a2b9a7b1b1c6752a8ef8c4c94f9cae166d5264399fe04e99c3d5838b8da5c1e37a248555ff8862f351afc50a3fd76a9718311943f48dbf54f38d10975fa2ba773605d871899a65add25bedf43dc1e29c70e8134e8bd477975a175853b460432a3bac59e52ac3a29458dff59dae3ba82309b0b4962da770afe2d874e52212194412486ef504e09b8154b24217eb4cfae173a06f565564718ca4"]) r0 = fanotify_init(0x8, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000001c0)=0x2, 0x4) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000100)=0x81) 05:05:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x1, 0xb9) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:25 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xff, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8f73}, 0x0, 0x0, 0xebd3, 0x0, 0x6, 0x7}, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0x8) close(r0) r1 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000001780)=0x80) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000017c0)={'security\x00'}, &(0x7f0000001800)=0x24) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:25 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000), 0x4) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 05:05:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x8040, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x7, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="110700000000000000090000000800030000", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) 05:05:26 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}], 0x5, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:26 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r1 = socket(0x11, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50280810}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, 0x7, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000005) msgsnd(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000032330a7a9a588f453146e7790c04628a4fe2448b9092ab83dbabf4fce2187add3d670a54a7af11794f17fdfff299147d6467fe066aa890aa63125e14db3e59b4ffb363a63af53e2a7f703c5c9263ea68386f3dbfb47bc1b9c1613cdc22deadc54244b0195f9cb818c1b78b1ad9d632154bd1fe6226bb0de39ebaded6064cd5ce5303f6cac9ef8221175727b27a038286cf986684d99cf7b4c3a5928d491e3ed9c206882b70df4c75463b2695137a4e910dafd5057c44cc1a0e908439eee4d6049dc6d9d7fb751df458fab1aa907b254c706421c3709f99258fcb20453eafe80000"], 0xe6, 0x800) 05:05:26 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="770779fed3288b1c00"]) 05:05:26 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x482080, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000180)={{&(0x7f0000000200)={'Accelerator\x00', {}, {&(0x7f0000000100)={'Accelerator\x00', {&(0x7f0000000040)=@adf_hex={@normal='NumberCyInstances\x00', {0x9}}}}}}}, 0x7}) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) 05:05:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="3f00c472900769f7ef1c05f21248ece3952964b486a4ec18114e88f8000000"], 0x1c}}, 0x0) [ 2016.597387] cramfs: wrong magic 05:05:26 executing program 5: syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0x2a4afd43295cdde9) gettid() [ 2016.656762] cramfs: wrong magic 05:05:26 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x410000, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000000c0)={0x0, 0x9, 0xfff, [], &(0x7f0000000040)=0x10}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='pagemap\x00') setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000140), {[{{@arp={@multicast1, @private=0xa010102, 0xffffff00, 0xff000000, 0x2, 0xa, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0xb087, 0x2, 0x400, 0x9, 0xfffb, 0x40, 'veth0_macvtap\x00', 'nr0\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @private=0xa010100, @rand_addr=0x64010101, 0x4, 0x1}}}, {{@arp={@multicast2, @broadcast, 0xff, 0xff, 0xd, 0xb, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x861, 0xffff, 0x0, 0x3f, 0x6, 0x1, 'vlan1\x00', 'batadv_slave_1\x00', {0x80}, {0xff}, 0x0, 0x5}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x44}, @mac=@remote, @multicast1, @rand_addr=0x64010101, 0x1, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 2016.777679] audit: type=1804 audit(1609823126.422:8876): pid=1967 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1731/bus" dev="sda1" ino=17568 res=1 05:05:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x18d0, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x178c, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @match={{0xa, 0x1, 'match\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @void}, @queue={{0xa, 0x1, 'queue\x00'}, @void}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @void}, @dup={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x1488, 0x1, 0x0, 0x1, [@dup_ipv6={{0x8, 0x1, 'dup\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @val={0x1470, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RANGE_TO_DATA={0x1154, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "6ab39a69b2f2d5dce9369350f58bc908d0239c16872ad155237d245a7e0d3a19b12ed442143c09886af900ffed77332e025616c98a87a1"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "908160ef08062b9436e9b1097083b9ebf6ff47a10a4a8c656519f330feee74d63ac78ba2628361b042b599b7b82010786a83e8678d41e3f33b4a11d4dc8e5cf49faf9265b5a6d98e32"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_FROM_DATA={0x98, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "e2d06b733b9bd4536edf7b6feb2c50ecd92735956b224c7c1a5f2da69798a8f3b55a6d05c0b568d01a447e047f59461ba18d418820532ea041f116b02cf79304d6b0acac87b6974d0f460520a9cf3f9699042ed6815fa45486458e314a44cb87993d0a04aef64f36065f9b277a8966ba501c247699ae74d08c1c1aeb3f252021"}]}, @NFTA_RANGE_FROM_DATA={0x260, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x102, 0x1, "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"}, @NFTA_DATA_VALUE={0xc8, 0x1, "11432807b9be3eb1a2aff3cd9f7964f7c9a316a4db3e948338a51ba04aeb555d78d61de34784063379fb904ca1c9e552d753f43b22de8127ac323a59d0405db62e2c6f26978ac9a0f4aa955b052ff0b2ee7a8bbd68be4f1b67a671fbe443ecd3cace4599966361f28e513919c297622fab18f4f40ef2950b7110cb72f742cad87683939ffc82d0a886d5422e5169dd4b0f88893ab0aaec622b705f3b1b9b93884ffb67d7fd39101bfce04670ad59813ac6fb907cfed879c13275be6374ef0ae311d317f7"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x71, 0x1, "2c70706b196173592ed7520df9a5335e28bfb11ae250631b4695fcc6c728855ecb702772c870f0e39f35105c1fa4533332aa3a9fb66de1e4c6f141b19450dac20be794bf1146047a132eaaae3b942aafe1e542437a87db2100e513cfe6de916eff6cfaa0e1eecb1c69bcb52577"}]}]}}]}, {0xc8, 0x1, 0x0, 0x1, [@rt={{0x7, 0x1, 'rt\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}]}}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x9c}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x31d0dba235550602}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xd3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x40}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x7}]}}]}, {0xc4, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @masq={{0x9, 0x1, 'masq\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xff}]}}, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4a, 0x1, "154e386befd7fa1725006b748d49012312e86c2d184ed3a75ab1b69dbc27d51caac09046632a5b561579c2ba397372cfd5a2ed7a4740482044432e535d484900313ec802412c"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}]}, {0xc0, 0x1, 0x0, 0x1, [@connlimit={{0xe, 0x1, 'connlimit\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}, @target={{0xb, 0x1, 'target\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3f}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}]}}]}, {0x1c, 0x1, 0x0, 0x1, [@tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}]}}]}, {0x3c, 0x1, 0x0, 0x1, [@nat={{0x8, 0x1, 'nat\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x12}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}]}]}, @NFTA_RULE_EXPRESSIONS={0x114, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}]}, {0x5c, 0x1, 0x0, 0x1, [@dup={{0x8, 0x1, 'dup\x00'}, @void}, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}, @rt={{0x7, 0x1, 'rt\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_DREG={0x8}]}}]}, {0x1c, 0x1, 0x0, 0x1, [@exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @counter={{0xc, 0x1, 'counter\x00'}, @void}]}, {0x44, 0x1, 0x0, 0x1, [@dup={{0x8, 0x1, 'dup\x00'}, @void}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}]}]}]}, 0x18d0}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGSID(r5, 0x5429, &(0x7f00000001c0)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="80010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:26 executing program 5: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x1, 0xff, 0x3f, 0x7fff}, 0xc) syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x0) 05:05:26 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) r0 = semget$private(0x0, 0x3, 0x1e2) semctl$IPC_RMID(r0, 0x0, 0x10) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000001f80)=""/4096) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000680)=""/4096) [ 2017.009982] audit: type=1804 audit(1609823126.492:8877): pid=1971 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1731/bus" dev="sda1" ino=17568 res=1 05:05:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r1, 0x1, r2, 0x8}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x12400, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={r1, 0x1, r3, 0x6, 0x80000}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r4, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCSRS485(r6, 0x542f, &(0x7f0000000000)={0xce1, 0x2, 0x9}) [ 2017.346269] cramfs: wrong magic 05:05:27 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {0x0}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:27 executing program 5: syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x1, 0x2184c0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) 05:05:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xfffffffffffffe38, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xd79772cb}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x817}]}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x0, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x90000000}, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x80000}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0xffff8001}]}, @TIPC_NLA_MEDIA_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xc6a9}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xfffffffa}]}]}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1a8, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde06}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff32f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000004}, 0xc1) 05:05:27 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 2017.488690] cramfs: wrong magic 05:05:27 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x2402, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f00000002c0)='cramfs\x00', 0x7) 05:05:27 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000000)) 05:05:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x80081) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) bind$isdn_base(r4, &(0x7f0000000040)={0x22, 0x1, 0x0, 0x40, 0x2}, 0x6) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="795f0000000000000000130000000c0009000000020000000000"], 0x20}}, 0x0) [ 2017.654581] cramfs: wrong magic 05:05:27 executing program 5: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x1, 0x8}) ioctl$CHAR_RAW_FRASET(r0, 0x1264, &(0x7f0000000040)=0x9) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x101802) 05:05:27 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x4, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 2017.734382] cramfs: wrong magic 05:05:27 executing program 0: chroot(&(0x7f0000000000)='./bus\x00') time(&(0x7f0000000040)) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\v']) [ 2017.763335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2017.796963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2017.908916] audit: type=1804 audit(1609823127.552:8878): pid=2061 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1732/bus" dev="sda1" ino=17265 res=1 05:05:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x74, 0x15, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x40) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) [ 2018.178188] cramfs: wrong magic [ 2018.181923] audit: type=1804 audit(1609823127.622:8879): pid=2064 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1732/bus" dev="sda1" ino=17265 res=1 05:05:28 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {0x0}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfd04) r1 = creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) read$FUSE(r1, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000100041b04096349da3e6600", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES64=r4, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="040001000000000008000000", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x74, 0x3) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0xffffffffffffffff, 0xee01, r3}, 0xc) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000280), &(0x7f0000000440)=0x4) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x200) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040027bd7000fdefe710eabebd5ddbe82508", @ANYRES32=r8, @ANYBLOB="0c009900ffffffff2d000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000e0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$CHAR_RAW_FLSBUF(r6, 0x1261, &(0x7f0000000000)=0xfffffffffffffffd) 05:05:28 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc2}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x402, 0x0) getsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f0000000180)=""/206, &(0x7f0000000280)=0xce) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x1000, 0xc, 0x4, 0x70000, 0x7fff, {0x0, 0xea60}, {0x5, 0x0, 0x0, 0x6, 0x3, 0xf5, "014b430f"}, 0x10000, 0x4, @planes=&(0x7f0000000000)={0xfffffff7, 0x2, @mem_offset=0x400, 0x3}, 0x7}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:28 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x82002, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0xff}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000380)={r5, 0x4, 0x9}, 0x8) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x400, 0x30}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8814}, 0x8000) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0xf09, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="b4000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf251200000008000600fcffffff08000900ff7f0000540001800800030000000000140002006e657464657673696d30000000000000140002007866726d3000000000000000000000000800030000000000080003000700000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="080006001c71000034000180000014000200626f6e643000000000060000000000000000000000000000000000f6ff0000000000000000deff000000"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 05:05:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f00000003c0)=""/151, 0x97}], 0x7, 0xe0000, 0x8) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) [ 2018.713372] cramfs: wrong magic 05:05:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f600000", @ANYRES16=r1, @ANYBLOB="795f0000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes256, 0x0, @desc2}) 05:05:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="795f0000000000000000130000000c00ec7f08000200000000000d2843118c", @ANYBLOB="6dee369c0b38a1f52efa25e2f81fa14c1b3dbb17aa3f71488c124903cb041df8c8ca870ab71734acf0457f7082bfd07b0204a520c4c1de862a880a9d2fb9df2d5ef8500c1f3cd2264b7529f6ca08897983cfaca997fdf907a48f720b43185adf927aba61221ddf9591ae9000de879f0f08075e7494570466f202552615d433a27106e4b3d994a9f9f09d2672cadaa2bd0bd9e62ec84b5ab128afe3983d58cde95ce3378ef64195044c724aed68b552928633febfed985a10b05a170af7f480651397ababbaeea3284e35ec02bb40d9ad2cda9d21b965f72ebcdc86e714bb177288770d820a81274efd3f72b77bf512ab411ac8"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 05:05:28 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x105000) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9, 0x82300) [ 2018.839846] cramfs: wrong magic 05:05:28 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000006c0)={{0x0, 0xffff, 0x8001, 0x8, 0x6, 0x33, 0x2, 0x9, 0x2, 0x5, 0x100, 0x3ff, 0xbd, 0xffff, 0x5}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000016c0)={r1, 0x401}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x30180, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00012cbd7000fedbdf256400000070df278eb3f04ff71a948a4666c9a3091b525ae53206e0f5854cddead174b65a630c4025a26cc7d631e03b282e7b7584d5ef8106eafc10fdad3dc41f0d5b7550b38b851d7381d1d943f22319f14476bdd6b11a1ea54fb025ba5393a6608dc156baf431e805a1e04f702323ac204e8b93641d490539807d2c9dc3cffa6570306b34f44f02f801aaa98cdea34d133c38688cb709673d30332620fb44cf22"], 0x14}, 0x1, 0x0, 0x0, 0x8f370408b8af3c6e}, 0x20000854) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r4 = socket$netlink(0x10, 0x3, 0xc42414871c6114df) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, @sco, @llc={0x1a, 0x0, 0x74, 0x1, 0x1, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @can, 0x6, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='veth0_to_hsr\x00', 0x101, 0x24e, 0x400}) getsockopt(r4, 0xb58, 0xffffffff, &(0x7f0000000300)=""/72, &(0x7f0000000100)=0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:28 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x101000) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [{0x1, 0x77e}, {0x8, 0x9}], 0xee01}, 0x18, 0x3) 05:05:28 executing program 0: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="de377a6978980a948dd549cc8542999df8cff12bb822415910609f7013ee50eef8100cdfc5982005b99b8067228dad032c40d35850f1ab9b5575767a4fd1017577cc9c25c4b718f2035f94e032f86c56394bba34be17a67d1989fae32c781f81ad515e06417ed60d84be3fd4cadeb16ca1774e0528e64f7e122382e645594874852019c8b6dc52c1703573e2539cfa0d9d1d321bdf692c5903f4603294c11ac71c3d85576c11c6599d1e6c40aa1188", 0xaf, 0x8}], 0x0, &(0x7f0000000640)) [ 2019.005004] cramfs: wrong magic [ 2019.193000] audit: type=1804 audit(1609823128.832:8880): pid=2154 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1733/bus" dev="sda1" ino=15759 res=1 [ 2019.268940] audit: type=1804 audit(1609823128.912:8881): pid=2155 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1733/bus" dev="sda1" ino=15759 res=1 05:05:29 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {0x0}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = dup(r0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0xfd04) syncfs(r3) 05:05:29 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000000)={0x5, 0xe12, 0x3}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:29 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f00000020c0), 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x1c, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r0, 0x200, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x401, 0x0, 0x80000000, 0x8000}}}, ["", ""]}, 0x30}}, 0x2000c080) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x20008000) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00c36b0518a49a701f000000", @ANYRES16=r0, @ANYBLOB="01002abd7000fddbdf25010000000000000002410000001000137564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x4018005) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) 05:05:29 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0xffffffff}, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x98, r0, 0x301, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x98}}, 0x200008c0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20048040) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r0, 0xd01, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x361}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4008080) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f00000005c0)=0x20) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) 05:05:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xa00, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={r5, 0x5, 0x800, 0x101, 0x6, 0x1, 0xfffffffc, 0x3ff, 0x96e, 0x1ff, 0x1, 0xfd16}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) sendmmsg(r1, &(0x7f00000026c0)=[{{&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x2, @link_local, 'veth1_to_bridge\x00'}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)="16245128349bd52248fe9655865e55f9ff7bc266697a2ee096c3dc5829e5559a8a7013fe609461af3ab9921bebd28cc16e153099204c4ffdb108ce2df52b7eb4647486e323d4feb51b4cf7743d85b285fe1d", 0x52}, {&(0x7f00000000c0)="f00e02610c9480022684acf4d42ab845b4a468898cd13a11d6785039c62c46ac2035ebfdb4181936708ce065af0b2260405584de5416", 0x36}, {&(0x7f0000000540)="12f69dde129366cab07aa2399aeb4f61ae75391f4dda91a15940bcdb03f8138c9eb538fbb4365df519785d52fd8028303c6783a2c1d321617eb279d5a6828f5e80bfad4654e4c7863f4b3272ee7761238b31d93136e275c1db8458c1941d76e695c4e002b6307329130bdb4018e607229592c1ec7493f04d081c2ab4c1b9982fc7b71efac9f51adb901afe5f0c006a3de125b11eb3c032979ead9dccf86059007910a3d019f5a5ef655facd6057f03cab0f35abce98c416edad935d7d6dd70cbd245c66e149ebe8a330edcea565f8ce6e80bc92494ff0270ae7e3b485c9a556c58a895cd973258d3", 0xe8}], 0x3, &(0x7f0000000640)=[{0x48, 0x3a, 0x0, "f077111deb1030d72e61296ef649fc2138bee2088ddf683d6606a2c96355173f87e060c66237f839237c56024034d37e73b61f219971185b"}, {0xc8, 0x10e, 0x5, "69b23032ba207d9ed846eaabec28c31fff4f9ebfebea0eeb12030238ff534c416f132e4010ff49d8803da05b8e7014e80461d0e615ce955e1521e453dc224fd813259f4d9764a6bd910b22930a105f7422179646b63ab481adc0d8733301b2e7562ee0ccf036dcf7ab2a4e79912c1e7393117306e59e21ca7cc5cd76c52a70cfdc4cc4ef4e6e69a1414b66c0625d629bb95ab66291a293a0001ee9691897493a94ad7b0c7340dcbee2dfe7868c8bfd7a3150"}, {0xe0, 0x109, 0x800, "f8c7ba82e879a96ffdc76a6697934b8b593dc70ecff4df5dcd5adfded26ad0df450cbc9724d9d6dd7aecb828c880a09a7677ef62276ecc793b4a0103f6145f8cc3275a88ab2542536cf57035411b9eac8f66e855b0e44ad357ee2ab8ab9ab60e880474832df2d67cfdf7fd09a1e04b93b917f2e9b667dbfb4eab87f577bfa86902b641451eace90ee222fcca5adf08138045f18b82f24b178dd7f9f98fc555de31c1f3d5916cec38ca13016d6e1fc718c83927a16053bb67980082dc037faf73a2df4f176a349b0314075f"}, {0x10, 0x107, 0xff}, {0xe8, 0x11, 0x627, "846a234b3bc267b73ce4330db124cbaeabda1973aa19a00791053a4dbe9418deed113a79f986f9bbaab3329e71e82c192ebe7f2972c8785dc1537cd8cdc718a044a6cabcce982c24a5417e6f9dd040ca740e30366a60d5c3f1ed14a09de6256e9d6fca66cea8a2a998c3ab91e596d51a9ffe383731121eee5033548e24a084d365e1bc7934805c2002a7bceecd6b0c0263962f3d839fc0605eb820d27419dd5421aea1fe78a5adc72a4b3e1b1f22d7dbb637070806c629513dc0c34ec5e9f821be3d12c9b5651de4a47ced19fd311191957c56fb23dd"}, {0x68, 0x110, 0x0, "e270520540183d223792f0c45ca7411ffd7f0330612a29449483f27dceb1bf8335be69aef1089759671663956a71c8391c3ba5d8cce883402b6fe5e5f50852ab7b9b11f56b5543ee80223258c051a68be5d3af5b43"}, {0x18, 0x10d, 0x80000001, "7c2ce8cbb413de1d"}, {0x60, 0x6, 0x0, "5d5dceb6168ebdd9c7a9327dbcd7e74e0cf54c40bc4a7d78111ace376ab0b51050e579af85c2428fa3589f19bd94486d35ff9b78b5829cbfaeccebaf53c7443f89d3145f2f8ad38601"}], 0x3c8}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="73aa2a3bc789e0ff539649647b04c2ee28dd487aa8a4dc89d802437aaa8201f98b74fd76fb6a6ddb6c53b4ae3fa80608106ab7e01ec97e5b8b", 0x39}, {&(0x7f0000000a40)="b53e846bf953f221e6b7e4f0012c2b4b2202bdbd6ca0b0c80eb5e2e0fbf37a9eec5fcce78de5525df483249d9672c2c03d427581d6f686eb02261ebdf495575e4659a509746febcd55f160f388ad1e1caab2fe3603a9f5ee32476e2f96d5380f6910c080d6c463a2b7f3965f667c3d51355b", 0x72}, {&(0x7f0000000ac0)="a37402881f31531a008e165da73926218420c585f2fac1cb8aec74e12896f05bf9269653d1c284cb37a633ad257beb2e0ad7df345938f4e0018b84b9477b1471e0fd77f83909fe748c75e48cf4f992010d2200390471094324d13c54773f0c70de0bffffb977f49ff17d6fd218748d54f785eb244167881bbd99189549813930bc861c654c9dc16a90f33881a48ac38245eb130021713a4a58e12a7418d5b4a87cf3b381457005c3764609a044b15ebce5", 0xb1}, {&(0x7f0000000b80)="380120fc1a15517aa396d3ef93ab7caf3243e7eb5c5cbae2fb7f884a8c5ca4cfa6a20cd7f2c668efdbd5fc04974c01d1fb5fd307e2e66b728c23503c43c2331169d95ff3f27c792f678fc3b038ee8ce64c7688dd352efcd46b1a5fbfa3ab0b5cf03695e9857156507ae2dffeed6da305b062dfa7c0933e205cc3a8e6c64f6a84d4f4f5dd8b884cbf92f82b47718023a566c917974e4ec075c1c4a8fd3c941156165dbadde81498b38fca42f05edbd816c7c14ad1ec564ef82b5e8e19662a4bbc4a37ef06babfb4d983ce85de3a703470e783f72c735cb2d52992ef6f3058ffd1e8e95c70367ca38c49e9ca4d555a4a438bf4f73c46e1e45b5052495ed2b8ba3c6145c49c0cdac10d6232d93b0460ee016cc2d9223f95bfd47b9c2247ed0aa7e71c0db03aa00a9b63e90490f2016c7b6e4d022d82f5647ba77346ce50f7b933b9b6ec61ff332d086d2f4a8ff1ec0cd1e9f34ad4526e9169d8fb4e1da80395e30f0ae90dfb9ff56b3f49edf155468ead317aae2b2a40e3b7b0f683564fe9bbc39566a3eb8dc6dd3df11e93c751dcb481b1f3038bca159bf25c8012cfefaa1338173bc63094d59f841c6ad2754b713f1c31886a78ba6cff713fedb6ebc7102361cb10898cd5bd6137778f1cb9873ffc7e1d7fce0226aced6dda556efc8fb519a48ea9dc64f8b8f815f9513e04cf6da85139dae75ee9e51b099885dcead76f55934eb595371c0d82365b9b5cc22769d2b773b355e4b5197badda82f086d0c1f0842f69f5dd96bc572a0956b5cddfce0970f485de77412ed98c40edac86d6dd156d9cdf884c866420d8937c27ef4a43aa3a792abcafd7453ccd4c1e8d0675374a9c0aea1446ef68bf0b0d6fcf3eb15480441553f1d4695759d867bfd2387db2eb5e54d487861df1a9d29385f388ee9ceb8dbef539abcd733150ca146fcf0b1410c5eb8a52f77e478ecb59ec43c307de36fa848ec3a365c2d274f036c99219f77c9b0d671d53fd2bc350ec21cdb4d934b429122ef0314d68fc81943a370380d6aa81521274ab8daff8ad00d280b56d0fd8be0b58c174b247786ed7bef93b41637efe689795c546fd7dcf9962c8cc49b3486c5b10ff6624735c7a62ba29752951b58e01aaa35c9e75ce5431a807cec141f6606bb2612151f36e2d539b4525fe37cedb59dde24eaebed165d629b7f9dc302859f890d7c49368497c28e6c586c203fee79bbeee58bbb2074a307ef8c90bd5254c08ccc3378584289487aa91172cbbfc676122032b7574f2bcc16b50c53aea2d59ac5702097c816c5046d954447fa7cfa544aa5738dffb7c9e7f14a460bc17e5f9b9355ea5650fb166c6a809ecc79dc146056d9bbe425b2e11bedd281fd9a8a5ae16bb934894e0e373466f781c9e95f74a8fb6197ef72ba6eda0280189df35585b74569e3fc029a1552d13a270608148eff9d288554952cc95d8aa3345ad8080af87d20f5031456fbcbc4f4e8fdc6d14137ce49dd52486aad3097f74b0b526d0d30dd0adca088ce2a8aa9fa59683dae6840a47165ad94a09687e929f1492a68907b6403bcb33cac769ebb2148f6931c3770e8dc8f3d1159ea51785a9edf094ba729bf1a3a472375fe2cc2105c98afb5a54b6fdaa5af3ddae31ea3d7870e5362cf0ec3f9a455a4e0033aa6ef226a35057c93834a4886e9c5a00cd6ec99f882ae149d0005a2f7e1cc9c8bd0d1a1a9706b3efe4cd7b4d0e251abed695e7bb4147e2d69af74205169c3396d19015a6d1c406fa829d41b1393db376f93af766b88a22b63fc861e6f1297b70020ff80c9deffb44e6c74d1c874ef4fb4271d6aa4e967ccc7dbd75ee181bc6bccba23d4d3d291c8d17a5260d7cf4955cde8a0428c4919626426d15ea3e20083f0e4182f4875fa722e6827b3b7a003ae27b2b5513a65c99f1ddcbbbc9a152b8e12678cde07711a4f19e4b0581c9b19961ccb37e5e42b19d1e870ef4ec662e90015f40fad23fa623bc1d3f4d4119408c918bd3efc60a805bc607171ffc4e620a02cd2f6276a8b31185cdce8d48032bb3d75c6268ce57cba9505a0ff837f0b71982e793f58ba286127d07bf5816e18566fa47b5d626efbd52bcbca70501d236baa26968ad13763daf43f99e23b7790859f40221555090ff1db25185a7be32a68efa504d7e770e88306660970141e16ec8fb85a770b42482e9b479446db32b38b5bba34c5d9e4710dd813a197cb849472d849af4c116f5e3d73249aaedbaee5f68dccb56a6a2bdbcdb26dc5beb0d16e40ea86710ca612ae0bb1c7884c23c641b5667f51d9bb594ee4b93c46620051c6ee7918c5abe7a61f8c02cc4ae9b36c7396e56b01b435bcb56c51a0324e4187211029a80d3f1b0f80f79318cca0a55cefce93630306a73a1f005660e1e72f94658ca89946c43f51c31bbc7c6099ac112cb959f8971f2d1001b42b8de2203c94c8e5c30079080e5205df8ad6faa63ca4d4167331b4c7e61214a1209b96602f8de8167a4dfe1d99249a32e9b8293e37d067a3c0462f448f8a0e8c956e6f50d165b8da75b691aec06a2f0d10066bac67f5eab368508a0c108bbd771cd82f5927bd946f78b518a079fe529e677787d1e92557cddfe15b09a93dafbdd5ad08b5c27f8a2d66116c3bd5f2ddf721bee3e42dd36925511b8601d67512524a1e4c6a0498b591698d8ccc8ea4c11bbc95139543820e32ab333c9a7fba47d86d8d1eabb172b5d954de0b54308ec617d0787190f22397a5010db02c8790fa0325fb30805845608de6461864310cf3be2e331cae8144bff39f002624dbb07c1225a13cb8b6473ac2c625208cf34829e3ac9c7d20f69f8dd90bb710263c08b441915edbcec7d0bdad2f2070b1389e27d101a20d962515ae98334d4425881465a29fb6a10dce7a9ba519867cbc39fc449382366de2dfdcd740f8eef5ea68f8db46dd9bfbfd0a704c5a57d3adfc6b1c50e932d7588f765b193e961f4fe9e7edc956de0159b35989bae71df206b002a93f8ae2fdf78498ece869c27ae953bcbe75d45d3b2ef80244bfe8ddbb8281441e93ada9ee5517acc824015bae4366a0ffa2a93f5e3cdf29e7f4d68c4a7f5df9cde7cb0cf83bfa5aa77943961a3865700c4c7875a63732625074823b821a564f259cabdabe375456aa0ad70d482fd3cd8ff1bcea64a52cf04823391c54ac0ddaeb4c7eee708ae02529de102dd7d96639a8b48b83deeabeb827bfa77108f63b25bcf0475a6e0f712bb79f4100322717eb579e8e31e3892d2a9a9257318a1183775b30222ef0405d1efb23e59db09599cc3ba0602174669a8798c2aa4171f6f43c6ec8562dc84228a1ee96cf8c0cab941e7fbd8174d947780d5e61938c842cd91e7210a30ef73f9193b12d7b2d4d46864a0135c4e9425ed8ea41b76e205419b9bddbbb95eac8d786edecf8183957b7931cf195b075d9478cc53137acc6645ebd55039e1a10b72015f471a5d4b7d744288ba97bcd7805bdfe79d4c4df5502461e585e036e37698a5505cb75d59db183e0cb5187e6ba17283bfd0c3b74549a14ae888e9bae520e09f8befe8ace7c58ff1bc822c3aa0bfd1c4c62eb0332ee292c19e50fc094f4056fdcd25fdcc0b521257dcc2fc026429afe57c69c45859728966814df05ccc15e921a61ea9e315757befd43e36d65c35ba8f69449bdfa1abe3d98d1f61f4d0c9e955d3a0571ce61619822fcf0b059b4f9970a096f8bc5effcbde4224650cf23726f7c8dbbf6a4e0d0a9b4fd8424a069bff50e0c2f5636f199f970828ea4c7fb57352eb5b182b05d163e72b289129921d6c5e2073a374ffbe75412af7deac897ce58bde7ee7fcdbc165e369b2e5a6c1b7a7a899faf58c3c6ce9746d1bb245ebb6f8a46eb524e875a4e5602dcde32609956519c99b5b453811042d80f6eff21d51f3ec504111d8712a7f0c5ae3b37cafc8edd23d0a3d50718fba6e8e9bfedc0a237e766e3ec2ea94d268eac163188463b2b37c23d56d20842cf7764a368dbaad479ff44f1c17342ddc70c53e8068bf031667b82628523aa86036599d890625bd65e4bce206269dbd1f42477319671a32bf74d5d74e9bce2d7579ccdeffd481ac7c47ac2c198b09bf81714993bc0c482b2acaf9a072003283ef25421002da65390ba0d13f93014e3f79733b5bc32fec63c61e1bcc7786bd422441a7ae17aef3061740f67d0adf9b35ca78b62926cff5fa1ef46561c49720c41d8ef6cb8bbd169635b0c0e3acd2a86011d44d15807801da10a387498a2c06eeb640813de88641d2970ed4f7991ddfdbb38a36fd9952f74fb1cac04063bbde3fb616555c94c4548822c94d19586889cee6d143282657d55d66026514bb8cb83ab9334e70a299fbfafc5704d9db32c6fc9d6b042c62b4f85b1fcb5ec513d35d7ece27584e283a4ddfe4b5f2a80ed539003852f2dbc9c3a6e48e2aaaeb9239557f4fe0e0977022b65a88bc42fad51aa6203fcd568fda0138ab5b61c316f071e47b49e7f2978419d85d144c71184a5516a8fedefa8047d8379af49b0915db72a2fa2253005abcb700b64d1bf2bc23946cd45ca67077b91d4a43a087e08c75c63e9b00a8bada8e32c12d2115bd41202ee62dcfb9ddce0ed5c3b295869082d90f42c2ffa8dd75ffccf8b64d628fe262b531d7529d6baace12195f3ef62e489a0e1d9d50f4b52ddb46dc74343da83e285f969fa49a8007423b860c30ca63480fe4a5f5b75b3e5fdb6c428c560a701b38a4015c2019601b53c8a390601521a035206ad701caecfb1b55d14a4f0c1ca0d7eb4487fdda823b01a4ea15cdb6f2fde55e46c9baa7e18dd9a6ceca630599e8ad7cce27e83aa243aff485690e05e01767f59fd318b6188c1c94ae804a50b1df2d259ec1ec0f267300431cefc5cc729a6a85fe77df577c83876c959d7eb17e103c782fc23d69c619c2d6eabf2b22f34057f1c1e14d2985704b3ac9c68a4db4fa177e86c00c4a3c77e7d75eecf81ab6304253b1d65211c9dfa9730fcf5267c52384284ebc353a03a0a5ec2fbed5692f06681ff85618fa4c8259c218309f357339273643e816071edcfcd040fb699a9e6cd64824b42e9a660bc459d1bcbcf0ae0f1ab844b6ca0470bfd7dd465330dd54fb473e92b79da25649a1949b3b9e350cbbbd14fc1d6137c8854d13a583150f4c7f5bb62bfb9d53371600562d0ddf1ad04a656e2c2c9bfdd007e5af0334cdc919547465b7875b36aa44ddabee81c113dfbb492df23c3e1de37a4015f0ce4ca915c4b38ba36ce8445e4eae4d2301a4b7758070a48536cad23346472e5024c7299c104991f87fa21e01363b7831737c6d1dc85bfe1201afa3b8607184e525284e63a56bfcfacfa8ffe1c090c03572386932008559fbb0b44d9210b8e00e036a5c7ca1962622710f3695c058a5a27cd9c725529bd5f455fc897105a0a405b9b880c1e9ff66d24390d0e2ac0ebefe611026dcbe9bbc75f46d0c6974e1880b67424d73871f5c7b435fa77a6f8bcf9394b6bfc0b6b07816e555084d255cbaf3da32cd7da7c9dbb24c121764a3cc2a87d9c0bd4e74dff255cf961d5a795187635dd84262e02f0b63e387da5cab73283c593f3ee452f875c2d8a0bc51fd0d813b4f97e2b314dcb304f3072a18ffd0125f3fda6849edb0f712a1476a8060f39963f1b797b55adeb76d3fddab600dec15f9b42a6112498d18b9e0ba4562b12bc1e240795c8584befad12bb8c730d5f420053075d92e91ca0abde6dfce73e104adaffa3faa049d8683d1da0831d01a7c4e7d8db4e96cb919c6e95fdbd55057974264cd9fcd", 0x1000}, {&(0x7f0000001b80)="5db6417f82f9bd40696b90066c7ad9688526de8dcd48ca836daaf67cc7561e114d92c80536ec12e8f1585ece0871f7af6e18b17e63481f5cbb8d69fde5c629d6a9cf2f", 0x43}], 0x5}}, {{&(0x7f0000001c80)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001d00)="dd0cc3c85430f361740c25f0745e2a24bd04a7846afc291fd223431f4e86527c9973c12de7f8993488b97b6c3793392c908b2d5f7bf705f392a8bcda84a49e7128d8d1662acfb066127596744e27e8a5a3dbf3b0f47e8080b620a6430b88e21bc90ae3093dadb245bcf04ac67d44b586af459f1417648a3f5c1a43a3535818cfb2b03710489b4270eae5ee51da8b9ee11c6e77a52b3d1d212f28ae53b2b42b74410bba9bad", 0xa5}, {&(0x7f0000000340)="48cd7245b650f9b64a12468b7ddd0c8cd0c8b5e03bbc96", 0x17}, {&(0x7f0000001dc0)="5f66e538e26b41268f94df6a11e6d56355cede6f8dd98ab8dfe360afc8dc780dfe47159847a4f3f6f4c3ba4ba9071ed2df27e71423a0c5fe386731233761fecaffccb950a62b4bed2ea213d18f060baf50549937dd02", 0x56}, {&(0x7f0000001e40)="3617511dc6e132f81590d4700aa8de8a856dc10e71d914b720d5616725031c4d322cf749eaa4a7708268c81c61ad8682efa8024b674cdb25e37e8e737c90994f56329d9cc798f9ab89ce4ff7d207197d7e866d6911262cee6be39a59266df94a8a046196aefc721e3fd0696297c1", 0x6e}, {&(0x7f0000001ec0)="86066df482b7a43e3a619a12834925c9ba24794ed92f10be10ab9d10bb931966eb670e092baf4b97470d48642d42819da6c89a87ce03f300d1df8e384db2082e3dc141555e4d81172d150dd78b4656056e0dfbdcf19349349d515092863ab31e8e644c4e5f49e80679e5b2c3f27184a9ac2604c3ce0732bbfd386cbae32accd7353aa07bbfb50c7e4eb20ee795b67e340e8eaaf78c328edd21e101616fca68ebfd6e702f1374fafe4b7ce759fc003c588edeb9bddff1c635841d81c3e091864b18f2211f9374d65023f46f04d698199195aea729740fa37a1471", 0xda}, {&(0x7f0000001fc0)="b68ac3b55cc159cc3f7d1685f76ecaf54b39cb05d8ea0285e75ad6637ccee2dfe966811d3e8d263a29d29937d65cf43f7e73ee7e247796cd541ece0eebc7ad8719be74f0a2c91c2accdf053d912c543161d624efcd82d7140fb88945fa5205547808fee15c4f4acd6d180a655b1feb5290555b875590f306955dc9b37086f7bc7a9830900cee184b68", 0x89}, {&(0x7f0000002080)="bb7380ba358e65d3b9d98d5a1ae59542f1fdfb9165b63afaa6dd4fd51493b0980ac43c83980a0894cc9e1cd11e1bf1b6301e4f0d254a5d9e20747f5be1016c4caeba8c1a4eaec89ac54ae83c12bc10979320da4ff0c4f7a437e6d88fbf19ad49a7bd46c218f9b86e50541fea92408fa1ca1f", 0x72}, {&(0x7f00000004c0)=':-b$', 0x4}, {&(0x7f0000002100)}], 0x9, &(0x7f0000002200)=[{0xe8, 0x1, 0x1, "23a38bc4540deaf60216a980d1a78d134ac3173c082f37cba2d2fe2d1b9279672832ceaaac3a6154370a7bc16d1bf0ca8cc371f3379c5d81685846d770f0118c6a6215d656ad543464336eaee05d9258dea804037b9b239e20c0ff9f020d60770b4bbdebade873c8f2e083bb6bdc62f44a13abaad4972a4e820a40e24352550a5bc7475b2749200fcb2e13d39c79cce2c2053ca6b22da28b552b3d12035c03952eab52c8156490274211ef8cc748cad521fc6953364907c307a996642ab86b9afd6613a5169ebe9d4041c6cd6d3c2de613aa32"}, {0xb0, 0x109, 0x3, "701da8fab4e0c27b16e5b662a0708ff02ff20fcb13d5f6108e42afb2b571713949bb0c1c41e468a1851eb353e3dac2e3e90f8502371786c3a08ad24ffe17e5d85f8547d12ab5dd728c4db98f8264857934859a87bba6a4fad02ed1580ea2945302c997f400d3146d4b0d4d68f10fd09b264dd3e636a293ecdca5c2ff597fa77ae6367d5b63905fd9df18f28100a96520204bed9e45758f85e4bf"}, {0xa0, 0x117, 0x5, "1767c978e283f2fb0a24ff5633f51e268594276064db4d63fc90eaf88b464fbad715f52ff727f491aaa34611e4b952e0fb196bd37ac0af1394a245e84f9d5ac92792c61deab98ebac4232f95bbc55ab248ce4c1a885a311dfa76543241f506746ec418ba5b26f345e879020e9416fbf7d0c974721320aaf2e5397b9785fb912b9d32f1e7c7be60ffc0dabb"}, {0x80, 0x10a, 0x3989, "32888a7eaf596d3e49d4965a33abac9fefdbdc7d966c2061eace8bbc340bff529b5d3de784daba714ee6349b9a4e8b4b13ddc2b5277e4acec437511f3d815cc2eafb72b0f9707671fbf7a1d7d3a7d9a8d9504f08f9804072a0998f10aabac47f2dc5f7998873206cf021c9e638"}, {0x78, 0x115, 0xc47d, "d663eb4a42e195ef67c05f813c5cebd5b4993f81d1ab71478ae425f8bfda9091539647b49049a553715cc49e9de7c6534742b39097500d214a44e76e75d1665e48383c98fba66782eac52021faa3f6953b97256031ce12ceff23b80cb11476455ce77c1f83"}, {0x18, 0x1, 0x80, ';c'}, {0xa8, 0x107, 0x8, "f1683aef8bc50a952404743a7167979f1c3985938c7419063aa0c4b765c3039f6362098ca48abef873894cfa259120002365e4717296ab70e18c8d30f650ee8f675f74764b4d03fcbc4c277ec243bf2f3666bc6fd390643684cee58135fca78ef8be972ba923a6f18eb2afd450caabf6501225dcca3a3d2805a6f97d340f2fc711ebf1f8b791057ccc47cedc31a98c701178eb7323"}, {0xa8, 0x110, 0x4, "23d048c77a779998007926577e073f89891eb36fa94517475ef66ac69e5ffa0a132c6cab1217ffe5ef8ef9f72224cfffd63e4a49e13a3447bcfafc9a7709eba6b621045b7088fb22f01bc69e144fde9021a6446d6c517826c2c90b6018640a40c0b56b5999b14ef75d285a5061bc2443205b0e52f47d468a2ec5babf399424af66ec37c1dfc5aa6f905b6de1babeda31c7b81dbe3080"}], 0x498}}], 0x3, 0x4804) ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000080)={0x3e1f, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r6, 0x1, r7, 0x8}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000002100)={r6, 0x0, r4, 0x7fff, 0x80000}) 05:05:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x25dfdbfc, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 05:05:29 executing program 0: chroot(&(0x7f0000000080)='./bus\x00') syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x6, 0x7a, 0xcd}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = socket(0x25, 0x5, 0x0) connect$pptp(r2, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x1, @default, @bpq0='bpq0\x00', 0x10001, 'syz0\x00', @bcast, 0x8, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) getsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000340)=""/223, &(0x7f0000000440)=0xdf) [ 2019.941187] cramfs: wrong magic 05:05:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) openat$pfkey(0xffffffffffffff9c, 0x0, 0x2000, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xff00, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x4, 0x70bd2c}, 0x14}}, 0x0) 05:05:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) openat$cgroup_int(r1, &(0x7f0000000000)='memory.max\x00', 0x2, 0x0) [ 2020.110917] audit: type=1804 audit(1609823129.752:8882): pid=2192 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1734/bus" dev="sda1" ino=17570 res=1 [ 2020.385785] audit: type=1804 audit(1609823129.832:8883): pid=2198 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1734/bus" dev="sda1" ino=17570 res=1 05:05:30 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) ptrace$setregs(0x17, 0xffffffffffffffff, 0x888, &(0x7f0000000000)="a2d0088c2785b27a1d9f594977164c14f682b853da46b96bc03d642231965f4ce7b67efa7cdb5cea2a02e4430275a737ecac452fe74675e95654d689194b4f2c7eb39fc55227a1fdb99590542db7c49a254192aa30fbbf7796a75b30a537aa02860cfe71a520") 05:05:30 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') prctl$PR_GET_CHILD_SUBREAPER(0x25) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 2020.597274] cramfs: wrong magic 05:05:30 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x5, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:30 executing program 0: r0 = creat(0x0, 0x0) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) open(0x0, 0x2000, 0x4) renameat(r0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffbd) open$dir(0x0, 0x40, 0x8a) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x3}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000100)=0x1, 0x4) 05:05:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x100, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x100}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00', @ANYRES16=r3, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:05:30 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x2, 0x6, 0x1}, 0xc) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:30 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x402080, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x42, 0x7, 0x3, "9eddc9aa75519fae1423527aa903b29284ed4f7b8c45c2b34e0b649aaaa688394b7347415a5abcb735f88ef4b0768f0bfa89e653cd8e905c94a2fc5b6de02f3383b7"}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000200)={0x7f, 0x1ce, 0x9, 0x100, [], [], [], 0x6, 0x0, 0x13, 0x1, "5bde1a5db445de181d71bb3321d9657a"}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x1c, 0x0, 0x10, 0x70bd29, 0x1, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setuid(r2) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC=r2, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRESDEC, @ANYBLOB="2c7375626a5f747970653d2c646f6e745f61707072616973652c00910b8b"]) syz_mount_image$sysv(&(0x7f00000000c0)='sysv\x00', &(0x7f0000000100)='./file0\x00', 0xe94, 0x8, &(0x7f0000002600)=[{&(0x7f0000000340)="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", 0x1000, 0x1}, {&(0x7f0000000140)="2a0cde66456bbba31b0d058fbd2ed22d5b088e904d24000e643f4342f5567b04b9573b6ce33f8b629eed31118ed3f2129a95516247a1578021c4cbfe6fe620de412e38183067c3e653ec4c60102d577c7e0ef0c12615b670", 0x58, 0x8}, {&(0x7f0000001340)="8902d458139ffd5cdf218f19d65764a6f7404e", 0x13, 0x3}, {&(0x7f0000001380)="86aeac26e8ab2f0566449f80999277e1ef65413a1ceb27bef7226aa4e58ae713e58623bbf1d6eb805fd44d85fa8ceb109e1da7b431f98dfa3724dc10c2fc13d1e30b4cdc743706babb11423d1ae1ac5285a3c55ea84825cf21134e35d070c8728dfdc45bbd05a726eb1d1b8e389c27d4ac831a20f792aa3ff1b8dc8835dcd1549cf2c999d91d4b3b69fdcba03d6e3c66da02fa451bcb94d4dd176e2274d3b072ad8eebdef770d74faeca9fadc612ff62de7d94bdafee1c48b31a4aa0df639fc9da0d44d92dee1b25c7e7890f6e7ba16921b3e47596d800102ffc1d1ff5", 0xdd, 0x8}, {&(0x7f0000001480)="f1587bf541", 0x5, 0xffffffffffffaa21}, {&(0x7f00000014c0)="b706bd7e96c4fc5eff7dc39a", 0xc, 0x7f}, {&(0x7f0000001500)="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", 0x1000, 0x2}, {&(0x7f0000002500)="e7028a272e1ed850097425a3e9e07c11449942110020030f2b7f99e6b71a7a6ce245b8b091fa291fcc7c92d24375896f1e59960d4ed5cabbeeb3fb70de8e5539690834f3324350b9f82291f8f1067d97c685b72c637a92400bdcb13bdd371b43b59267c5b1039421de31c725600a0f9b029a1977710d998559391adf0622e78a5503d7028254318fe11ac6a27fde54e0b676fa68f4da503c8ced98d099cd3930d2e6000982bff33d10c368de12d4cf2481755303c687b1ca484897523b203ca4e49651bf12560761050b9440699abf782c49234b34151d783f3ada180ba780799beab5c1b18e4be129305098b681fa3a19f419308eec47cc87ba3d8684d9", 0xfe, 0x5}], 0x20002, &(0x7f00000026c0)=ANY=[@ANYBLOB='#,/dev/autofs\x00,,/dev/autofs\x00,/dev/autofs\x00,*),/dev/autofs\x00,defcontext=root,smackfsfloor=/dev/autofs\x00,uid<', @ANYRESDEC=r2, @ANYBLOB="2c736d61636b6673726f6f743d2a2a29ad98f11e745f61702c00000000000000"]) 05:05:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="45ef000000000000000029c7b8ac08000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000100)='./bus/file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f00000000c0)={[{'%&'}, {}, {'cramfs\x00'}, {'cramfs\x00'}, {'&'}, {'-@-'}, {'cramfs\x00'}, {'cramfs\x00'}, {'-'}]}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000)=0x9, 0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:05:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000040)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4}) 05:05:30 executing program 5: r0 = syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0xfffffff, 0x8, 0x3, r0, 0x0, &(0x7f0000000080)={0x9c090a, 0x1}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000200)={"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"}) r4 = socket(0x25, 0x5, 0x0) connect$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{0x101, 0x4c0b}, 0x15}, 0x10) 05:05:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) open_by_handle_at(r1, &(0x7f00000001c0)={0xae, 0x0, "b25406c10cd6706d3718acde1f13f8b9b90758060beaa13c1bf5a7fe227773a80f21b5179cf133e612b2847343c082cd89d5ebc8821eff79179b2d12dc578cc23fb209c251d1e7ae53bc41539e752e31c954915d5f4d802a5a524bfa58b6bc5440a6254192d155c0f7a1feb9bff83aa7cec54c542975c0e8ed2d7b43c9a8dc20974c570791447b5639bf6b8547f4330de50d89e2e16f469e4c2227a1fae3de81f7214cafac6f"}, 0x111000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r2, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 05:05:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xf2, 0x6, 0x1a, 0xfffffffc, 0x44}, &(0x7f0000000080)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="110700000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1c}}, 0x0) 05:05:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xfd04) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0xfffffffa, 0x0, 0x1}) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f2edf62fa26d0c7315805a0057bdc92b13cca0e52ff759b8ff9a1dc71031b20995c74c36014b380e49b852b9fe99d21dd5817dffbb63235f0ea603d11399b89919e711084054f014008e66fcb63cb02b5e8fc7e3932d87a0e661fb870e02c1c2fc6eef244b1ac53f45af0a4b47bef0921c6d3bbf17be776b3067a5b743fef46529f1d8b207819a2f971ae715bccc6da8eb41e9c747255f260c6f8f033c617e056668d29ec77dc7161a79e82922ce62eab986fa36565b94014d71ee00"/210]) 05:05:31 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x540d, 0xfffffffffffffffa}, 0x0, 0x100000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0xfd04) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r2, 0xf8, 0x7fff, 0x5}) [ 2021.441606] cramfs: wrong magic [ 2021.676696] audit: type=1804 audit(1609823131.312:8884): pid=2310 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1735/bus" dev="sda1" ino=15854 res=1 [ 2021.853030] audit: type=1804 audit(1609823131.372:8885): pid=2311 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1735/bus" dev="sda1" ino=15854 res=1 05:05:32 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x3, 0x81, 0x2, 0x0, 0x4000000000000000, 0xa1926, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x52998b7576396db5, @perf_config_ext={0x2, 0x8}, 0x10000, 0x0, 0x80000000, 0x3, 0x0, 0x0, 0xfffd}, r0, 0x10, 0xffffffffffffffff, 0xa) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0xb52eeed0aa0dc4ef, 0x0) bind$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) close(r1) r3 = shmget(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/52, 0x34, 0x10001, &(0x7f0000000140)={0x77359400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x40107447, 0x20000000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0xfd04) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f00000001c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000200)=0x28) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x3) 05:05:32 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) socket$key(0xf, 0x3, 0x2) 05:05:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11070000000000", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 05:05:32 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0xc5e51505b7fa776f) 05:05:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r5 = socket(0x25, 0x5, 0x0) connect$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xa0, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20004080}, 0x4008) 05:05:32 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x5, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:32 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x496a41) [ 2022.542546] cramfs: wrong magic 05:05:32 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x5, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 2022.585843] cramfs: wrong magic 05:05:32 executing program 5: syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000000)) 05:05:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="795f00000000000000130080000c000980080002000000000000"], 0x20}}, 0x0) 05:05:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0xfe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40000}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffdc}, 0x0, 0x0, r1, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x40107447, 0x20000000) [ 2022.736863] audit: type=1804 audit(1609823132.382:8886): pid=2357 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1736/bus" dev="sda1" ino=17597 res=1 [ 2023.422427] audit: type=1804 audit(1609823132.452:8887): pid=2360 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1736/bus" dev="sda1" ino=17597 res=1 05:05:33 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x5, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:33 executing program 5: r0 = socket(0x25, 0x5, 0x0) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000200)="2f899ed72592898496fa1153673c0be614ee6c7aadfae3f0bb9c939887eccfb1890cb3410f4b404b7f0b9d3491606896145b82b95b0cebef891c43d9c6403152d5af9d0cd352ab6677d43c2dbc5d60c598a1d3870c2e97df36710f58029a2fe55ba0af563d842a2d2418e0b614d56458a58abf5a56a13c864c2a226189957063cddb3fce00506068f868a21a9f1d3e132980449b3aeb1b069f4c9f5e7e74ee873f3e4308d96290722567217288afbc0cf339017aa15d") sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x1f}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0xfb}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7fff}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x47}}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48094}, 0xc040) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) 05:05:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x7) openat$pfkey(0xffffffffffffff9c, 0x0, 0x2000, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x2551, 0x4) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r3, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xff00, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x4, 0x70bd2c}, 0x14}}, 0x0) 05:05:33 executing program 0: syz_mount_image$cramfs(&(0x7f0000000100)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x2, &(0x7f0000000340)=[{&(0x7f0000000140)="91538ca4c27bb273702a933198aa09fe6a4e43ca4391a07b09aaffaf40606529541a96ae08da17dda261a78e81b12d29f00e38b1d1320107859e8137ef4cc0df1196ba937fff0c989c85afa555399fd932c1dc2793f40d9f7bd164f96c96f03acc1e2e6234625eac5ecfd758fec7f682c6c3cdfdaf30c1ce6d35e2952226b079ce1166ba3739101c819bd1aa6e7b8596e968edf589e0d57ac542758b1b5271f92ae56c858838b70c6300ef52e589da57bc3f6a31f3177eeaea81b83834a5c58b0b5a9d8754965b18b97aedf9c3a65ddb28da3867677791ab38d0ac978b8498f98ea786b2bcf3", 0xe6, 0x43}, {&(0x7f0000000280)="2cf278090a00c40baefcd8730f3d29f426834e96aa481d492bd302dd6b4684f007e8deb986f986536de6f93f49130d21e3f23f8d48252021fdbaed55303c9e826e42fdb6111eb4586467e62bf5164094a36eee494d0289fe2f8ee1798c00db00317ffeb3af441af24e64bf96759df35aa85fd88be31de09f4d0580fa5360740547996a62cb71e881e3175ae3c55c9b", 0x8f, 0xecd}], 0x0, &(0x7f0000000640)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x242082, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/238) [ 2023.546415] audit: type=1804 audit(1609823132.572:8888): pid=2363 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir137888820/syzkaller.xoOV6k/1420/bus" dev="sda1" ino=17603 res=1 05:05:33 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) r3 = socket(0x25, 0x5, 0x0) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000000)={0x1, 0x7ff}) 05:05:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)=0x20000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x2f38c44fac2c5f79, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) [ 2023.681180] audit: type=1804 audit(1609823132.622:8889): pid=2364 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir137888820/syzkaller.xoOV6k/1420/bus" dev="sda1" ino=17603 res=1 [ 2023.706970] cramfs: wrong magic 05:05:33 executing program 0: ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) [ 2023.763983] cramfs: wrong magic 05:05:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0xfd04) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000280)=[0x1]) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)="37323cd00954f8c2059ef0879bc5c48e0e9931c36a1e2c5fd7325e70c432ae96e5209eaa12d5cc0fa2f39cc61bb9ab06ed56cf8d22a6a79cede10089f4b11e6545f01afe175daebea51b19c6d663a8a6de9ffee1637fd78d1c7d8c0919a92345a069f023415f98fe72d5615741d4780bbb7b7180aba945be105cce23fb3c8fef38007539f389c9be23daa83bc5c7d3fe8d2d66bf74ab5ea6", 0x98}, {&(0x7f0000000000)="70d7143e24c3305587234511dd2bcf14280d0be89ad52fa44ccefd3dcb068071b4d80c1458066ef8518af6ac6967dd221a933e56631cb2", 0x37}], 0x2) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1f0000ff", @ANYRES16=r1, @ANYBLOB="79d3f72fb30c5471fb741ace5f00000000000000001300ad2a4a3967d5f154020000000000b4e7d0125f432e2c4f8c108e1184d8f80413d2b3ada272331a8a72e74fe98dae8763beddcdb3071a907877b4fb27d13aa3c7a22faec561a0fd6e50c5d077dcc477dc4d1b1ae96c4104b430bc7c78590c000000"], 0x20}}, 0x0) [ 2023.865128] cramfs: wrong magic 05:05:33 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="005653bd776705d8bb8b9d1f9c86f715957ccd3020cc1997a07c8fd9555d40e59f4a4e11be26e71fc2575ce82e8093d773ff9cfb9f0566692437685414a83f287199db1fc8f49c1ea7a35c994efc5d84e6e0f88950de5cf76dc87269be5441b354455a33dc0d8b7298c572408b4c504373f5b4fe2dc32fffd0bfc950c9dacbeb"]) 05:05:33 executing program 4: fcntl$getown(0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000000000, 0x2400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x4}, 0x4000, 0x0, 0xfffffffe}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0xfd04) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x4, 0x10400) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x284100, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0xfd04) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x300400, &(0x7f0000000400)=ANY=[@ANYBLOB="6d6f64653d303030303030303030303030303030303031373737379c1f6d3030303030303030303030303030303030303030322c6d6f64653d30303030303030303030303030303030303030303031301c2f6f776e65723c", @ANYRESDEC=r2, @ANYBLOB=',fsconpext=system_\t\x00\x00\x00\x00\x00\x00\x00t=staff_u,fowner>', @ANYRESDEC, @ANYBLOB="2c7375626a5f747970653d2c646f6e745f61707072616973652c00910b8b"]) sendmsg$nl_generic(r0, &(0x7f0000002680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002640)={&(0x7f0000000200)={0x243c, 0x23, 0x300, 0x70bd2b, 0x25dfdbfc, {0x1b}, [@generic="f944e07137793b11d179598c38134e34cc84b9d17617e27446c60357e8f541037ea42da6fb702bea5173a8ee1f5c11c96d515337f7d357702cd91391da1202d2278532c317d0f0acaf1add6afab299bcfb9cd01a905463c3235e5fb3ef2e6bbe54e7bb39fe0c6b9d8e621e7f2a5a1768ca9f535a58ee8b4914addae8f273a6897d70064bb57e9b22973243a783219411003abb8e2a58f51a976a5576b3b6656ab1ae788e0263a6f84e92fc209d358731a410c519f703", @generic="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", @nested={0x58, 0x24, 0x0, 0x1, [@typed={0xc, 0x20, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@local}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@ipv4={[], [], @private=0xa010100}}, @typed={0x11, 0x8d, 0x0, 0x0, @str='/proc/mdstat\x00'}, @typed={0xc, 0x2b, 0x0, 0x0, @u64=0x9}]}, @nested={0x1212, 0x65, 0x0, 0x1, [@generic="a81eb55fb63d79372dd3ae20c11fc4b67f6be1ef15a6e2d0282ca6f42d1e93e16b6111480e5fa7ac1b2eea80aa5fa719441de9dcdd117d304d8379694614b908be9c97e00960e0e131272121ef15f0e33e2002953cfa9c60649ed4089f2339014706ca14b9faec431e572c902501d0b964bc79942e8af04e11", @generic="cecc8c19f057da62902b301997c09cbd6905f697ad936a7d3b113c2ad2eb38aa5d6d757b46e18362ae2e3684709a3694d25c33b7999695b7fb103208356cbe11d9aade4201190e53edae3cb2b38d4548e5008deb48334d9b7d223e697e8e1ac69d6566f70fa6e2a3c48b852f6cd6589a91f44e1fe016bc2adc1372d278905be9ea83f6a933fe89ac32801c10f72ef4b8", @typed={0x8, 0x70, 0x0, 0x0, @uid=r2}, @generic="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", @generic="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"]}, @nested={0x101, 0x36, 0x0, 0x1, [@generic="e663a2cf43749f8269531303f76eaaaf9aac0839f124a9f37710fb3bb30cf98473e625a8b6e53c01a54df41c5633726be4954a97286e6e77ea46d5f3c01c4f11b70a11af654f77f32b9e825b75a445931e5a7853a669b5aa2ad59e9b80f00fd335cea11c99fb1489a9bf8ae64410643accdb2c19206540e9c001a5a5082b94217bd3a046099455a562a18aa0532b027eba4882353c5c2df3c72fa388579b518c1ae1d99605cd2ac05ca1932a1323445c777e2333ebf9e2bfd799de45d7ed6d06040c571a496126b970837c2736d26f63ec7a6f6b4037518e5beb1116e698d7ce4e0c6fb13d894c761de7b9f1e7a94fe464d7fc9dff5951239008756b1c"]}]}, 0x243c}, 0x1, 0x0, 0x0, 0x20080045}, 0x4800) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="795f0000000000000000130000002d00098000020000000000"], 0x20}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) accept$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) [ 2024.115168] audit: type=1804 audit(1609823133.752:8890): pid=2437 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1737/bus" dev="sda1" ino=17597 res=1 [ 2024.227851] cramfs: wrong magic [ 2024.249388] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2024.318137] cramfs: wrong magic [ 2024.322453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 05:05:34 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="857f036923df7b3d78b49a19f5a2"]) [ 2024.351422] audit: type=1804 audit(1609823133.832:8891): pid=2441 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir197414144/syzkaller.sNSD8h/1737/bus" dev="sda1" ino=17597 res=1 [ 2024.460893] cramfs: wrong magic [ 2024.538578] cramfs: wrong magic 05:05:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {0x0}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:34 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) sysfs$1(0x1, &(0x7f0000000100)='&@[\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0xc004743e, &(0x7f0000000040)='&@[\x00') read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r4, {0x0, 0xc}}, 0x20) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x103c00, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2b, &(0x7f0000000180)={0x7, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) 05:05:34 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x5204, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000180)={0x4, 0x1d, &(0x7f00000000c0)="4e77c7868c5c7f8058fb70c0463e3c4b47c72fd66c4319b8d9f418297337a9fbb034c8661851d1129d7a530b0fcd39cfcfa9a9b2723242e324626199c7a96aa6634db6a97c23ee56c9b80ccb77ac6967977f1cee49fd6ccf00e99f38d438300ff3516b309d4c17b897df23c9b1b8b8d6f3dea952703d7a53a6a70c0a87ae33d682cfa2cc9a09f5d9a1d49b0f6d93abdd0b2cab08b80dd666b043ef2b97c375aaf3cac045", {0x1, 0x7, 0xa8f141a9bbcf2e75, 0x2, 0x7ff, 0x7fff, 0xa, 0x3}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f00000006c0)=""/4096, &(0x7f0000000040)=0x1000) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xa4480, 0x0) fcntl$dupfd(r4, 0x406, r3) 05:05:34 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="4adf0f66c54062040b6d9ec40db87371c774114c67b978afa015f43c266f153bc0ffab7ee5ba26a9adee1165bf056470b0919f11160fc09c6b9f2b26574b3b13096d2e2f3f"]) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000140)={0x8000000, 0x0, 0x1}) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x5}, 0x16, 0x0) 05:05:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x8001}, &(0x7f0000000080)=0x8) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000240)={r3, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={r2, 0xf273, 0x10, 0x26b8, 0xffff}, &(0x7f00000001c0)=0x18) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="795f0000000000000000130000000c0009800800028000000000"], 0x20}}, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x80001, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000440)={{@any, 0x1}, 0x1, 0x2, 0x7}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0xfd04) sendto(r5, &(0x7f0000000280)="5d03f100a578ecd90eae175ed7c9f008aded73fb2691b9b5a0fee9b80f657d50892e9579b22761930833e96055062c1daa5b672cb6a9e686f8f5322a9a0dd3ede507e47d75f83263305819c3c2ae43821268f973eb88ff25896d935c6d67978f5e9ce2d9889e53a8e47e75c6ca868db3f6541962d2bff72d12b123a11d7fe49f7f4cd090f6b92d02c173676ffe6c4aa55220148fd2e3d4c4b5972a715005310162a3c42039d6bd74183f5cabf8a3925f85d541f5fc41cf64f0947869772dfe02436e5d", 0xc3, 0x4040880, &(0x7f0000000380)=@hci={0x1f, 0x4, 0x4}, 0x80) setxattr$system_posix_acl(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="040001000000000008000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x74, 0x3) r6 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) read$FUSE(r6, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010004000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="0200000073948b8327d4d67ce2ce390b7bd3d7b894d99b3d448c491e2973097870033afa54ab00c0b0abf6f3bf2915f195a0e6b8000ddb12a30bcccc7fd96f36d93f36fb46c893d6045cf589d53bc2d1796978c7e3cf1b6fd6616b5b1dad31a08b9b89a528fbe23209c86d93f405503b49ad5dd3b47fcfb6a4368b69a7b49ec6d8d9cc7f5a62de03b92cf07ffc66f9e51b160f5ab0f0fe50846ba01c574a891626869f568141", @ANYRES32=0xee00, @ANYBLOB="040001000000000008000000", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0xee00, @ANYBLOB="10000000000000002000000000000000"], 0x74, 0x3) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010002000000000002000700", @ANYRES32, @ANYBLOB="040003000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="f4ff2000", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32, @ANYBLOB="10000500000000002000030000000000"], 0x54, 0x3) 05:05:34 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@pppol2tp, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000380)=""/94, 0x5e}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/164, 0xa4}, {&(0x7f0000000740)=""/67, 0x43}], 0x8, &(0x7f0000000840)=""/67, 0x43}, 0x1}, {{&(0x7f00000008c0)=@ipx, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/166, 0xa6}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/34, 0x22}, {&(0x7f0000000a40)=""/2, 0x2}, {&(0x7f0000000a80)=""/176, 0xb0}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000c40)=""/140, 0x8c}], 0x7, &(0x7f0000000d80)=""/25, 0x19}, 0x40}, {{&(0x7f0000000dc0)=@hci, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/178, 0xb2}], 0x1}, 0xff}, {{&(0x7f0000000f40)=@phonet, 0x80, &(0x7f0000001000)=[{&(0x7f0000000fc0)=""/42, 0x2a}], 0x1, &(0x7f0000001040)}, 0x6}, {{&(0x7f0000001080)=@sco, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001100)=""/236, 0xec}, {&(0x7f0000001200)=""/240, 0xf0}, {&(0x7f0000001300)=""/196, 0xc4}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000001440)=""/179, 0xb3}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/54, 0x36}], 0x7, &(0x7f0000001640)=""/84, 0x54}, 0x2}, {{&(0x7f00000016c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001740)=""/44, 0x2c}, {&(0x7f0000001780)=""/68, 0x44}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000002880)=""/97, 0x61}, {&(0x7f0000002900)=""/240, 0xf0}, {0x0}], 0x6, &(0x7f0000003a80)=""/106, 0x6a}, 0x401}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000003cc0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x2}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 05:05:34 executing program 5: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x8) r0 = syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0xfd04) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x0, 0x1}) r2 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000400)='./file0\x00', 0xffc0000b, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x800, &(0x7f0000000540)=ANY=[]) getdents(r2, &(0x7f00000002c0)=""/120, 0x78) fstatfs(r2, &(0x7f0000000200)=""/131) r3 = syz_open_pts(0xffffffffffffffff, 0x4000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca249435, &(0x7f0000000500)={0x1, 0xf, @start={r4, 0x1, "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", "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"}, [0x8, 0x9, 0x6a, 0x9, 0x7, 0xc2, 0x1, 0x2, 0x1, 0x100000000, 0x6, 0x24, 0x7f, 0x3fe, 0x3, 0xd99, 0x9, 0x200, 0x81, 0x0, 0x10001, 0xcb, 0x8001, 0x10000, 0x8, 0x61, 0x61e, 0x9, 0xe7, 0x2, 0xdc, 0xa555, 0x4, 0x4, 0x0, 0x4, 0x5a25, 0x7, 0x1999, 0x6, 0x3, 0xae9, 0x8, 0x7fffffff, 0x20010000, 0x4000400, 0x6, 0x2, 0x8, 0xfffffffffffffffc, 0x4, 0x2, 0x10001, 0x4, 0xa8cc, 0x0, 0x5, 0xfffffffffffffffe, 0x1, 0x8, 0x3, 0x7, 0x8, 0x7]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000200)={r4, "893f4fd4ab6b0c6a76686c01e093a74b"}) 05:05:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xa, 0x1f, 0x5, 0x100800, r1}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') [ 2025.226981] cramfs: wrong magic 05:05:34 executing program 0: ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000680)={{0x0, 0x0, 0x80}}) syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) 05:05:34 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40107447, 0x20000000) [ 2025.267792] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 2025.269001] cramfs: wrong magic 05:05:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') [ 2025.376071] cramfs: wrong magic [ 2025.481081] kasan: CONFIG_KASAN_INLINE enabled [ 2025.487969] kauditd_printk_skb: 2 callbacks suppressed [ 2025.487977] audit: type=1804 audit(1609823135.133:8894): pid=2515 uid=0 auid=0 ses=4 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir137888820/syzkaller.xoOV6k/1422/bus" dev="sda1" ino=17608 res=1 [ 2025.559990] audit: type=1804 audit(1609823135.183:8895): pid=2516 uid=0 auid=0 ses=4 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir137888820/syzkaller.xoOV6k/1422/bus" dev="sda1" ino=17608 res=1 [ 2025.586542] kasan: GPF could be caused by NULL-ptr deref or user memory access 05:05:35 executing program 0: syz_mount_image$cramfs(&(0x7f0000000300)='cramfs\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000640)) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7ff]}, 0x8) [ 2025.621361] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2025.627693] Modules linked in: [ 2025.630881] CPU: 0 PID: 2477 Comm: syz-executor.5 Not tainted 4.14.213-syzkaller #0 [ 2025.638662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2025.647999] task: ffff888054d2e580 task.stack: ffff888058be0000 [ 2025.654107] RIP: 0010:kobject_uevent_env+0xb2/0xf40 [ 2025.659098] RSP: 0018:ffff888058be7bf0 EFLAGS: 00010206 [ 2025.664446] RAX: 0000000000000018 RBX: 0000000000000002 RCX: 1ffff1100a9a5dd0 [ 2025.671694] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000000000c0 [ 2025.678941] RBP: ffff888095845d50 R08: ffffffff8b9a8b00 R09: 0000000000000003 [ 2025.686183] R10: 0000000000000000 R11: ffff888054d2e580 R12: 00000000000000a0 [ 2025.693427] R13: dffffc0000000000 R14: ffff888095845c48 R15: 00000000000000a0 [ 2025.700672] FS: 000000000233d940(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 2025.708869] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2025.714725] CR2: 0000001b2f822000 CR3: 00000000a4bd5000 CR4: 00000000001406f0 [ 2025.721973] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2025.729226] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2025.736470] Call Trace: [ 2025.739042] ? lock_downgrade+0x740/0x740 [ 2025.743166] loop_clr_fd+0x59f/0xc20 [ 2025.746905] lo_release+0xff/0x190 [ 2025.750417] ? loop_clr_fd+0xc20/0xc20 [ 2025.754290] __blkdev_put+0x5aa/0x800 [ 2025.758068] ? revalidate_disk+0x1f0/0x1f0 [ 2025.762284] ? blkdev_put+0x75/0x4c0 [ 2025.765977] ? fcntl_setlk+0xdb0/0xdb0 [ 2025.769840] ? raw_devnode+0x80/0x80 [ 2025.773581] raw_release+0x122/0x160 [ 2025.777274] __fput+0x25f/0x7a0 [ 2025.780540] task_work_run+0x11f/0x190 [ 2025.784426] exit_to_usermode_loop+0x1ad/0x200 [ 2025.788996] do_syscall_64+0x4a3/0x640 [ 2025.792966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 2025.798133] RIP: 0033:0x417b71 [ 2025.801302] RSP: 002b:00007ffe41a31460 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 2025.808988] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000417b71 05:05:35 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x14, 0x2}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc004743e, &(0x7f0000000680)='&@[\x00') r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000100)={0x100, 0x7, 0x0, 0x31, 0xffffff00, 0x1}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x40800, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x40107447, 0xf6) 05:05:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = socket(0x25, 0x5, 0x0) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="070000aff8"], 0x14}, 0x1, 0x0, 0x0, 0x8866bc381e69f032}, 0x0) [ 2025.816235] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 0000000000000003 [ 2025.823483] RBP: 0000000000000000 R08: 00000000011af8a8 R09: 0000000000000000 [ 2025.830725] R10: 00007ffe41a31530 R11: 0000000000000293 R12: ffffffffffffffff [ 2025.837969] R13: 0000000000000000 R14: 0000000000000003 R15: 000000000119bf8c [ 2025.845217] Code: 03 42 80 3c 28 00 0f 85 e4 0b 00 00 4d 8b 64 24 18 4d 85 e4 0f 84 01 0c 00 00 e8 0a f0 3b fa 49 8d 7c 24 20 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 0f 85 db 0b 00 00 49 8b 6c 24 20 48 85 ed 74 b0 [ 2025.864287] RIP: kobject_uevent_env+0xb2/0xf40 RSP: ffff888058be7bf0 [ 2025.890152] ---[ end trace 2ac0b6f612a49da0 ]--- [ 2025.894975] Kernel panic - not syncing: Fatal exception [ 2025.900988] Kernel Offset: disabled [ 2025.904596] Rebooting in 86400 seconds..