GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:00 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:01 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, 0x0)
ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000100)={0x0, 0x1})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0xfffffffffffffffd, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00')
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:33:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c)
perf_event_open(&(0x7f0000001240)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc3633, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfa070a, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x743000, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c)

18:33:01 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

[ 1362.136022][T30763] kvm [30762]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000030 data 0xfffffffd00000000
[ 1362.151031][T30763] kvm [30762]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000077 data 0xfffffffd000000b5
18:33:02 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:02 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:02 executing program 1:
prlimit64(0x0, 0x0, 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0)

18:33:02 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x0, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000200)='\xf4y6\xce\xaa#\x9d\xc6\xa6\x03\"H\xbaa\xbf\xae\x05\xe8\xd9\xadwJ\xf7m\xeb\x8b\x1c\xea\xa57\xb2u\x90\xd8\xd1\x03\x00\x00\x00\x00\x00\x00\x00\xfd\xff,\xb8\xcf\xba\x12\xd7\xc2\x1d\xb4\x85>YN\x19\xe2\xabM\xad\xe4\x14\x0f\xc5\xa4}\xfc\xff+\'X\xf3\xc5p\xee\xf9+\x1e\x96%8\xe7\xf49\x89\xff\xdb\x03[p\x8a\x87Q\xde,\x11\x90\xb1\xb3\xce\xbb\xdca\xc2\xca\x06\x00\x00\x00\xd3\xf9\xb09\xba&\x96\x18\xb1i\xdf\xa2\xc4\x05\xdcHI\xdb\xb5\x8c\xf1\xd8{\xed\xc1\xa2Qm\xa0+\x06\x9f\xa5;V\x96:\x02\xedN\x97\xb8\x90}N\xc5\x8fu\x1d\x7fW\n\xe44\x00', 0x0)

18:33:02 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x16e, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:02 executing program 4:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
listen(r0, 0x400000001ffffffd)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000005}, 0xffffff7f}], 0x4000000000000d0, 0x0)

18:33:02 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x0, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:02 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:02 executing program 1:
prlimit64(0x0, 0x0, 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0)

18:33:03 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x0, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:03 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)

18:33:05 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:05 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:05 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x2c2}, {{&(0x7f00000024c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000004780)=[{&(0x7f0000002540)=""/179, 0xb3}, {&(0x7f0000002600)=""/236, 0xec}], 0x2}, 0x10000}, {{&(0x7f0000004800)=@ipx, 0x80, 0x0}, 0x2}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000300))
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg$inet(r1, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0)

18:33:05 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x0, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:05 executing program 4:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={0x0, 0x0})

18:33:05 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f00000037c0)=""/4110, 0x100e}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
alarm(0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
open(0x0, 0x141042, 0x0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
fadvise64(r1, 0x0, 0x0, 0x0)

18:33:05 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x0, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:06 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f00000037c0)=""/4110, 0x100e}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)
alarm(0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
open(0x0, 0x141042, 0x0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
fadvise64(r1, 0x0, 0x0, 0x0)

18:33:06 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x0, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:06 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:06 executing program 4:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{&(0x7f00000024c0)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}}, {{&(0x7f0000004800)=@ipx, 0x80, 0x0}, 0x2}], 0x2, 0x0, 0x0)
pipe(0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg$inet(r2, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0)

18:33:06 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x80, 0x188)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x20000000000000d8)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f000005a000/0x3000)=nil, 0x3000}, &(0x7f0000000140)=0x10)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)

18:33:08 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x0, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:08 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:08 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x2c2}, {{&(0x7f00000024c0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000004780)=[{&(0x7f0000002540)=""/179, 0xb3}, {&(0x7f0000002600)=""/236, 0xec}], 0x2}, 0x10000}, {{&(0x7f0000004800)=@ipx, 0x80, 0x0}, 0x2}], 0x3, 0x0, 0x0)
pipe(&(0x7f0000000300))
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg$inet(r1, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0)

18:33:08 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:08 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x80, 0x188)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00')
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0)
sendfile(r2, r1, 0x0, 0x20000000000000d8)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f000005a000/0x3000)=nil, 0x3000}, &(0x7f0000000140)=0x10)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)

18:33:08 executing program 4:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x16d, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a57f368c51340973e7075ae15a5745c47f111716cd5c379b4558"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:09 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x0, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:09 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:09 executing program 3:

18:33:09 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x0, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:09 executing program 1:

18:33:09 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x0, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:09 executing program 3:

18:33:11 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:11 executing program 1:

18:33:11 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x0, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:11 executing program 3:

18:33:11 executing program 4:

18:33:12 executing program 4:

18:33:12 executing program 3:

18:33:12 executing program 1:

18:33:12 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x0, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:12 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:12 executing program 4:

18:33:15 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:15 executing program 3:

18:33:15 executing program 1:

18:33:15 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:15 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

18:33:15 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1375.644748][T30964] device lo entered promiscuous mode
[ 1375.658450][T30964] device tunl0 entered promiscuous mode
[ 1375.665250][T30964] device gre0 entered promiscuous mode
[ 1375.674331][T30964] device gretap0 entered promiscuous mode
18:33:15 executing program 1:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
close(r0)

18:33:15 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0xa, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0)
gettid()
syz_open_dev$tty1(0xc, 0x4, 0x2)

18:33:15 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

[ 1375.699431][T30964] device erspan0 entered promiscuous mode
[ 1375.723257][T30964] device ip_vti0 entered promiscuous mode
18:33:15 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1375.781716][T30964] device ip6_vti0 entered promiscuous mode
[ 1375.805783][T30964] device sit0 entered promiscuous mode
18:33:15 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x17c, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a57f368c51340973e7075ae15a5745c47f111716cd5c379b45587cd00745678e51a1e88fe75c07e099"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1375.839592][T30964] device ip6tnl0 entered promiscuous mode
[ 1375.856803][T30964] device ip6gre0 entered promiscuous mode
[ 1375.869109][T30964] device syz_tun entered promiscuous mode
[ 1375.886700][T30964] device ip6gretap0 entered promiscuous mode
[ 1375.906328][T30964] device bridge0 entered promiscuous mode
[ 1375.934997][T30964] device vcan0 entered promiscuous mode
[ 1375.957119][T30964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1375.964648][T30964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
18:33:15 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1375.992727][T30964] device bond0 entered promiscuous mode
[ 1376.005010][T30964] device bond_slave_0 entered promiscuous mode
[ 1376.017821][T30964] device bond_slave_1 entered promiscuous mode
[ 1376.039717][T30964] device team0 entered promiscuous mode
[ 1376.045296][T30964] device team_slave_0 entered promiscuous mode
[ 1376.067241][T30964] device team_slave_1 entered promiscuous mode
[ 1376.075731][T30964] device dummy0 entered promiscuous mode
[ 1376.115442][T30964] device nlmon0 entered promiscuous mode
[ 1376.167100][T30964] device caif0 entered promiscuous mode
[ 1376.172702][T30964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
18:33:18 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:18 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x167, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

18:33:18 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:18 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

[ 1378.788071][T31010] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 1378.837831][T31010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
18:33:18 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:18 executing program 1:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0)

18:33:18 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, 0x0, 0x0)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:18 executing program 4:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1})
r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0)
ftruncate(r2, 0x200004)
sendfile(r1, r2, 0x0, 0xf10000)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:33:18 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:18 executing program 1:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0)

18:33:18 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, 0x0, 0x0)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:21 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:21 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, 0x0, 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:21 executing program 1:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x2)

18:33:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, 0x0, 0x0)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:21 executing program 4:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffd}]})
ioctl$FS_IOC_GETFSMAP(r0, 0x541b, 0x0)

18:33:21 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x15b, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:21 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)

18:33:21 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, 0x0, 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:21 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
keyctl$get_persistent(0x1c, 0xffffffffffffffff, 0x0)

18:33:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:21 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x23}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000100)={0x0, r0}, 0x10)

18:33:21 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00'], 0x2}}, 0x0)

18:33:24 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:24 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, 0x0, 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:24 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40c4)

18:33:24 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00'], 0x2}}, 0x0)

18:33:24 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00'], 0x2}}, 0x0)

18:33:24 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:24 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:24 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000080)="0f0147d1d1861900000f23c80f21f8350000e0000f23f8b9190b0000b8ba690000ba000000000f308fe938028d2f000000f30f2cc0b805000000f9e0a264df0f01c166ba4300ecc744240000000000c7442402bc0c0000c7442406000000000f011c24c4c11972d000", 0x69}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00'], 0x2}}, 0x0)

18:33:24 executing program 1:
clock_adjtime(0x0, &(0x7f0000000180))

18:33:24 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:24 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:27 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:27 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x1c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

18:33:27 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:27 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:27 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x80005})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="ea0010e800440f20c066350e000000440f22c00f21720f21c1c3f40f3803760f650f01c26a06ea00005600", 0x2b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:33:27 executing program 4:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x403000)
creat(&(0x7f0000000180)='./bus\x00', 0x31)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r1, 0x2008001)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x6}}, 0x18)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setuid(0x0)
ioprio_get$uid(0x3, 0x0)
setresgid(0x0, 0x0, 0x0)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0x19, 0x1, {0x6d8, {0x0, 0x3}, 0x80, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x200, 0x0, 0x10001, 0x1, 0x0, 0x0, 0x5, 0x400, 0x0, 0x0, 0x3ff}}, 0xa0)
socket(0x10, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)}], 0x1, 0x0, 0x88}, 0x0)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)}, {0x0}, {0x0}, {&(0x7f00000012c0)="7578ba6aac23028a1190b377919f1450acee7d88ba1a7a1e25e36584f4463a247506a0c28f40a648ae7df0701a4346f9ed413008df12a2513eabf594774a55575fb3e9b0f5ccd48f51b0a833eecc8c5577084f015ce410fef8c4fff2380fe29c9ee7228862809f3536a13225a2549905270b389d52adc35de84976c548bfa785b0b3170a9f6642cacaa859d23dd45bb8794c67db", 0x94}], 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x2)

18:33:27 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

18:33:27 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:27 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:27 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:27 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, 0x0, &(0x7f0000000000))
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:27 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

18:33:30 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x80005})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="ea0010e800440f20c066350e000000440f22c00f21720f21c1c3f40f3803760f650f01c26a06ea00005600", 0x2b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:33:30 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:30 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

18:33:30 executing program 4:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x403000)
creat(&(0x7f0000000180)='./bus\x00', 0x31)
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r1, 0x2008001)
fcntl$setflags(0xffffffffffffffff, 0x2, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x6}}, 0x18)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setuid(0x0)
ioprio_get$uid(0x3, 0x0)
setresgid(0x0, 0x0, 0x0)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000005c0)={0xa0, 0x19, 0x1, {0x6d8, {0x0, 0x3}, 0x80, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x200, 0x0, 0x10001, 0x1, 0x0, 0x0, 0x5, 0x400, 0x0, 0x0, 0x3ff}}, 0xa0)
socket(0x10, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)}], 0x1, 0x0, 0x88}, 0x0)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)}, {0x0}, {0x0}, {&(0x7f00000012c0)="7578ba6aac23028a1190b377919f1450acee7d88ba1a7a1e25e36584f4463a247506a0c28f40a648ae7df0701a4346f9ed413008df12a2513eabf594774a55575fb3e9b0f5ccd48f51b0a833eecc8c5577084f015ce410fef8c4fff2380fe29c9ee7228862809f3536a13225a2549905270b389d52adc35de84976c548bfa785b0b3170a9f6642cacaa859d23dd45bb8794c67db", 0x94}], 0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000240)=0x2)

18:33:30 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, 0x0, &(0x7f0000000000))
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:30 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, 0x0, &(0x7f0000000000))
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:30 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:30 executing program 1:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0)
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcsa(0xffffff9c, 0x0, 0x20000, 0x0)
ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x1)
ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000001880)=""/4096)
splice(r0, 0x0, r1, 0x0, 0x800, 0x0)
write$FUSE_POLL(r1, &(0x7f0000000180)={0x18}, 0x18)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

18:33:30 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x80005})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="ea0010e800440f20c066350e000000440f22c00f21720f21c1c3f40f3803760f650f01c26a06ea00005600", 0x2b}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000100))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:33:30 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:30 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:31 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:31 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:33 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f", 0x1}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:33 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:33:33 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f000000"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:33 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:33 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000300008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)

18:33:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffff9c, 0x0, 0x20000, 0x0)
ioctl$BLKIOMIN(r1, 0x1278, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, r1, 0x1)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xba})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:33:33 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:33 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f000000"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:33 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0x0, 0x0)

18:33:33 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:33 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f000000"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:34 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

18:33:36 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:36 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0x0, 0x0)

18:33:36 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffff9c, 0x0, 0x20000, 0x0)
ioctl$BLKIOMIN(r1, 0x1278, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, r1, 0x1)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xba})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:33:36 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:36 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:36 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0)
r1 = openat$vcsa(0xffffff9c, 0x0, 0x20000, 0x0)
ioctl$BLKIOMIN(r1, 0x1278, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, r1, 0x1)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xba})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18:33:36 executing program 4:

18:33:36 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:36 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:36 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, 0x0, 0x0)

18:33:36 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:37 executing program 4:

18:33:37 executing program 3:

18:33:37 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(0xffffffffffffffff, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:37 executing program 1:

18:33:37 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:37 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, 0x0, 0x0)

18:33:37 executing program 4:

18:33:37 executing program 3:

18:33:37 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:37 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:37 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, 0x0, 0x0)

18:33:37 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:37 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:37 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:37 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:37 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101000, 0x0)

18:33:37 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1398.063954][   T27] audit: type=1804 audit(1590431617.519:45): pid=31384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/770/file0/bus" dev="loop1" ino=46 res=1
18:33:37 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)

18:33:37 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:37 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1398.220236][   T27] audit: type=1800 audit(1590431617.559:46): pid=31384 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=46 res=0
18:33:37 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1398.275119][   T27] audit: type=1804 audit(1590431617.569:47): pid=31384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/770/file0/bus" dev="loop1" ino=46 res=1
[ 1398.320356][   T27] audit: type=1804 audit(1590431617.589:48): pid=31384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/770/file0/bus" dev="loop1" ino=46 res=1
[ 1398.348771][   T27] audit: type=1800 audit(1590431617.589:49): pid=31384 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=46 res=0
18:33:37 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:37 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)

[ 1398.369045][   T27] audit: type=1804 audit(1590431617.599:50): pid=31383 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1067/file0/bus" dev="loop4" ino=45 res=1
[ 1398.440220][   T27] audit: type=1804 audit(1590431617.599:51): pid=31383 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1067/file0/bus" dev="loop4" ino=45 res=1
18:33:38 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, 0x0, 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1398.614427][   T27] audit: type=1804 audit(1590431617.599:52): pid=31383 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1067/file0/bus" dev="loop4" ino=45 res=1
18:33:38 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)

[ 1398.787768][   T27] audit: type=1804 audit(1590431617.619:53): pid=31383 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1067/file0/bus" dev="loop4" ino=45 res=1
18:33:38 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:38 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:38 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, 0x0, 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1398.932045][   T27] audit: type=1804 audit(1590431617.619:54): pid=31397 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1067/file0/bus" dev="loop4" ino=45 res=1
18:33:40 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:40 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:40 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

18:33:40 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, 0x0, 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:40 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:40 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:40 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

18:33:41 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

18:33:41 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:41 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:41 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:41 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:43 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:43 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:43 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:43 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:43 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:43 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

18:33:43 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

[ 1404.433122][   T27] kauditd_printk_skb: 49 callbacks suppressed
[ 1404.433140][   T27] audit: type=1804 audit(1590431623.890:104): pid=31528 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/752/file0/bus" dev="loop3" ino=57 res=1
[ 1404.463826][   T27] audit: type=1800 audit(1590431623.890:105): pid=31528 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=57 res=0
[ 1404.483473][   T27] audit: type=1804 audit(1590431623.910:106): pid=31528 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/752/file0/bus" dev="loop3" ino=57 res=1
18:33:44 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1404.517527][   T27] audit: type=1804 audit(1590431623.910:107): pid=31529 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/775/file0/bus" dev="loop1" ino=58 res=1
[ 1404.542170][   T27] audit: type=1800 audit(1590431623.910:108): pid=31529 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=58 res=0
[ 1404.562050][   T27] audit: type=1804 audit(1590431623.920:109): pid=31528 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/752/file0/bus" dev="loop3" ino=57 res=1
[ 1404.586836][   T27] audit: type=1800 audit(1590431623.920:110): pid=31528 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=57 res=0
[ 1404.606659][   T27] audit: type=1804 audit(1590431623.930:111): pid=31529 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/775/file0/bus" dev="loop1" ino=58 res=1
18:33:44 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)

[ 1404.630517][   T27] audit: type=1804 audit(1590431623.950:112): pid=31529 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/775/file0/bus" dev="loop1" ino=58 res=1
[ 1404.655614][   T27] audit: type=1800 audit(1590431623.950:113): pid=31529 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=58 res=0
18:33:44 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:44 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:44 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:44 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:46 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:46 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:46 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:46 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:46 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:46 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)

18:33:47 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:47 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:33:47 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:47 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:47 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:47 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:49 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:49 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:49 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:49 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:49 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

18:33:49 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:50 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:50 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

[ 1410.574221][   T27] kauditd_printk_skb: 42 callbacks suppressed
[ 1410.574239][   T27] audit: type=1804 audit(1590431630.030:156): pid=31658 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/779/file0/bus" dev="loop1" ino=69 res=1
18:33:50 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:50 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

[ 1410.742759][   T27] audit: type=1804 audit(1590431630.090:157): pid=31662 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/756/file0/bus" dev="loop3" ino=70 res=1
18:33:50 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1410.803837][   T27] audit: type=1800 audit(1590431630.090:158): pid=31662 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=70 res=0
18:33:50 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1410.873552][   T27] audit: type=1804 audit(1590431630.090:159): pid=31662 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/756/file0/bus" dev="loop3" ino=70 res=1
18:33:50 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:50 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

[ 1411.022708][   T27] audit: type=1800 audit(1590431630.100:160): pid=31658 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=69 res=0
[ 1411.147786][   T27] audit: type=1804 audit(1590431630.100:161): pid=31674 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/779/file0/bus" dev="loop1" ino=69 res=1
[ 1411.275532][   T27] audit: type=1804 audit(1590431630.110:162): pid=31665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1075/file0/bus" dev="loop4" ino=68 res=1
[ 1411.306210][   T27] audit: type=1804 audit(1590431630.110:163): pid=31665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1075/file0/bus" dev="loop4" ino=68 res=1
[ 1411.329185][   T27] audit: type=1804 audit(1590431630.120:164): pid=31665 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1075/file0/bus" dev="loop4" ino=68 res=1
[ 1411.353497][   T27] audit: type=1804 audit(1590431630.450:165): pid=31690 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/757/file0/bus" dev="loop3" ino=72 res=1
18:33:52 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:52 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:52 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:52 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:52 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:33:52 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:53 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:53 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:53 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:53 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:33:53 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:53 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:56 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:56 executing program 5:
syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

18:33:56 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:33:56 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:33:56 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:56 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:56 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0xfffffffd, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

[ 1416.772357][   T27] kauditd_printk_skb: 33 callbacks suppressed
[ 1416.772378][   T27] audit: type=1804 audit(1590431636.231:199): pid=31791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/761/file0/bus" dev="loop3" ino=80 res=1
[ 1416.945367][   T27] audit: type=1800 audit(1590431636.281:200): pid=31791 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=80 res=0
18:33:56 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:33:56 executing program 5:
syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1416.974788][   T27] audit: type=1804 audit(1590431636.291:201): pid=31791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/761/file0/bus" dev="loop3" ino=80 res=1
18:33:56 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:56 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

[ 1417.107334][   T27] audit: type=1804 audit(1590431636.301:202): pid=31801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/783/file0/bus" dev="loop1" ino=81 res=1
18:33:56 executing program 5:
syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000500)={[0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]})

[ 1417.256435][   T27] audit: type=1800 audit(1590431636.301:203): pid=31801 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=81 res=0
[ 1417.276900][   T27] audit: type=1804 audit(1590431636.301:204): pid=31801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/783/file0/bus" dev="loop1" ino=81 res=1
[ 1417.301436][   T27] audit: type=1804 audit(1590431636.311:205): pid=31801 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/783/file0/bus" dev="loop1" ino=81 res=1
[ 1417.326649][   T27] audit: type=1800 audit(1590431636.311:206): pid=31801 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=81 res=0
[ 1417.346910][   T27] audit: type=1804 audit(1590431636.311:207): pid=31791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/761/file0/bus" dev="loop3" ino=80 res=1
[ 1417.498907][   T27] audit: type=1800 audit(1590431636.311:208): pid=31791 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=80 res=0
18:33:59 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:33:59 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:59 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:33:59 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

18:33:59 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0)

18:33:59 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:59 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:33:59 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)

18:33:59 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0)

18:33:59 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:33:59 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="34e70f00000035"], 0x291)
sendfile(r1, r1, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0)

18:33:59 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:02 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:02 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0x0, 0x5, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:34:02 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:02 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:02 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)

18:34:02 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1422.957568][   T27] kauditd_printk_skb: 38 callbacks suppressed
[ 1422.957589][   T27] audit: type=1804 audit(1590431642.421:247): pid=31915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/765/file0/bus" dev="loop3" ino=89 res=1
18:34:02 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0x0, 0x0, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:34:02 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)

18:34:02 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0x0, 0x0, 0x0, 0x9, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

[ 1423.239544][   T27] audit: type=1800 audit(1590431642.421:248): pid=31915 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=89 res=0
18:34:02 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:02 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:34:02 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1423.383056][   T27] audit: type=1804 audit(1590431642.421:249): pid=31915 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/765/file0/bus" dev="loop3" ino=89 res=1
[ 1423.408344][   T27] audit: type=1800 audit(1590431642.421:250): pid=31915 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=89 res=0
[ 1423.440955][   T27] audit: type=1804 audit(1590431642.591:251): pid=31933 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1082/file0/bus" dev="loop4" ino=90 res=1
[ 1423.476026][   T27] audit: type=1804 audit(1590431642.591:252): pid=31920 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1082/file0/bus" dev="loop4" ino=90 res=1
[ 1423.504632][   T27] audit: type=1804 audit(1590431642.601:253): pid=31920 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1082/file0/bus" dev="loop4" ino=90 res=1
[ 1423.573131][   T27] audit: type=1804 audit(1590431642.611:254): pid=31919 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/785/file0/bus" dev="loop5" ino=91 res=1
[ 1423.632741][   T27] audit: type=1800 audit(1590431642.611:255): pid=31919 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=91 res=0
[ 1423.654914][   T27] audit: type=1804 audit(1590431642.611:256): pid=31934 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/787/file0/bus" dev="sda1" ino=16146 res=1
18:34:05 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x2, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:05 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:05 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x80000000, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:34:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x8000fffffffe)

18:34:05 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:05 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:05 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:34:05 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:34:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:05 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:05 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:05 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:08 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x2, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:08 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

18:34:08 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:08 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r4, 0x1000)
lseek(r4, 0x0, 0x2)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:08 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:08 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1429.335758][   T27] kauditd_printk_skb: 47 callbacks suppressed
[ 1429.335778][   T27] audit: type=1804 audit(1590431648.802:304): pid=32061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/791/file0/bus" dev="loop1" ino=99 res=1
18:34:08 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:08 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x134, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x104, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xcc, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x20, 0x2, 0xfffffff8, 0x3ff}}]}]}}}]}, 0x134}}, 0x0)

[ 1429.437578][   T27] audit: type=1800 audit(1590431648.802:305): pid=32061 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=99 res=0
18:34:09 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1429.462477][   T27] audit: type=1804 audit(1590431648.802:306): pid=32061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/791/file0/bus" dev="loop1" ino=99 res=1
18:34:09 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:34:09 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1429.548866][   T27] audit: type=1804 audit(1590431648.802:307): pid=32061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/791/file0/bus" dev="loop1" ino=99 res=1
[ 1429.578039][   T27] audit: type=1800 audit(1590431648.802:308): pid=32061 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=99 res=0
18:34:09 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x38, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}]}}}]}, 0x68}}, 0x0)

[ 1429.629451][   T27] audit: type=1804 audit(1590431648.842:309): pid=32058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/769/file0/bus" dev="loop3" ino=100 res=1
[ 1429.654362][   T27] audit: type=1800 audit(1590431648.842:310): pid=32058 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=100 res=0
[ 1429.686166][   T27] audit: type=1804 audit(1590431648.852:311): pid=32058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/769/file0/bus" dev="loop3" ino=100 res=1
[ 1429.712737][   T27] audit: type=1804 audit(1590431648.862:312): pid=32058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/769/file0/bus" dev="loop3" ino=100 res=1
[ 1429.748924][   T27] audit: type=1800 audit(1590431648.862:313): pid=32058 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=100 res=0
18:34:11 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x2, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:11 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x38, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}]}}}]}, 0x68}}, 0x0)

18:34:11 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:11 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)

18:34:11 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:11 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:11 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:12 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x68, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x38, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}]}}}]}, 0x68}}, 0x0)

18:34:12 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:12 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:12 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

18:34:12 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x11c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xec, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x8, 0x6, 0x1, 0x7fffffff}}]}]}}}]}, 0x11c}}, 0x0)

18:34:14 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x2, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:14 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

18:34:14 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:14 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x104, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xd4, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x9c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x2, 0x4a4, 0x4}}]}]}}}]}, 0x104}}, 0x0)

18:34:14 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:14 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:15 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xf0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xc0, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x88, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}, @NETEM_LOSS_GE={0x14, 0x2, {0xc8, 0x3f, 0x1f, 0x10001}}]}]}}}]}, 0xf0}}, 0x0)

[ 1435.518765][   T27] kauditd_printk_skb: 33 callbacks suppressed
[ 1435.518857][   T27] audit: type=1804 audit(1590431654.982:347): pid=32198 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/795/file0/bus" dev="loop1" ino=114 res=1
18:34:15 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:15 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xdc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xac, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x74, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5542a503, 0x7fff, 0xffff, 0x81}}]}]}}}]}, 0xdc}}, 0x0)

18:34:15 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:15 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

[ 1435.695494][   T27] audit: type=1800 audit(1590431654.982:348): pid=32198 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=114 res=0
18:34:15 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

[ 1435.742818][   T27] audit: type=1804 audit(1590431654.982:349): pid=32198 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/795/file0/bus" dev="loop1" ino=114 res=1
[ 1435.766399][   T27] audit: type=1804 audit(1590431654.992:350): pid=32198 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/795/file0/bus" dev="loop1" ino=114 res=1
[ 1435.808329][   T27] audit: type=1800 audit(1590431654.992:351): pid=32198 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=114 res=0
[ 1435.836551][   T27] audit: type=1804 audit(1590431655.012:352): pid=32195 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1090/file0/bus" dev="loop4" ino=113 res=1
[ 1435.869898][   T27] audit: type=1804 audit(1590431655.022:353): pid=32195 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1090/file0/bus" dev="loop4" ino=113 res=1
[ 1435.944364][   T27] audit: type=1804 audit(1590431655.022:354): pid=32195 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1090/file0/bus" dev="loop4" ino=113 res=1
[ 1436.058262][   T27] audit: type=1804 audit(1590431655.072:355): pid=32194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/773/file0/bus" dev="loop3" ino=115 res=1
[ 1436.207924][   T27] audit: type=1800 audit(1590431655.072:356): pid=32194 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=115 res=0
18:34:17 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x2, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:17 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x98, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}]}]}}}]}, 0xc8}}, 0x0)

18:34:17 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:17 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

18:34:17 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:17 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:18 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:18 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x98, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x27f8, 0x1, 0x3, 0x400}}]}]}}}]}, 0xc8}}, 0x0)

18:34:18 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:18 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:18 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

18:34:18 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x80, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x22, 0x0, 0x4, 0x80000001}}]}]}}}]}, 0xb0}}, 0x0)

18:34:21 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x2, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:21 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:21 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x68, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x2, 0x1ff, 0x6}}]}]}}}]}, 0x98}}, 0x0)

18:34:21 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:21 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

[ 1441.651390][   T27] kauditd_printk_skb: 40 callbacks suppressed
[ 1441.651409][   T27] audit: type=1804 audit(1590431661.113:397): pid=32335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1093/file0/bus" dev="loop4" ino=128 res=1
18:34:21 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

18:34:21 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r1, 0xffffffffffffffff, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1441.889596][   T27] audit: type=1804 audit(1590431661.153:398): pid=32338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/796/file0/bus" dev="loop5" ino=129 res=1
18:34:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x50, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xff, 0x3, 0x0, 0x1f}}]}]}}}]}, 0x80}}, 0x0)

18:34:21 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:21 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1442.146978][   T27] audit: type=1800 audit(1590431661.153:399): pid=32335 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=128 res=0
[ 1442.167929][   T27] audit: type=1804 audit(1590431661.153:400): pid=32338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/796/file0/bus" dev="loop5" ino=129 res=1
[ 1442.199630][   T27] audit: type=1804 audit(1590431661.153:401): pid=32338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/796/file0/bus" dev="loop5" ino=129 res=1
18:34:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x3c, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x6c}}, 0x0)

[ 1442.235434][   T27] audit: type=1804 audit(1590431661.183:402): pid=32336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/800/file0/bus" dev="loop1" ino=130 res=1
[ 1442.272807][   T27] audit: type=1800 audit(1590431661.183:403): pid=32336 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=130 res=0
18:34:21 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

[ 1442.293265][   T27] audit: type=1804 audit(1590431661.183:404): pid=32336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/800/file0/bus" dev="loop1" ino=130 res=1
[ 1442.322092][   T27] audit: type=1804 audit(1590431661.193:405): pid=32336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/800/file0/bus" dev="loop1" ino=130 res=1
[ 1442.347015][   T27] audit: type=1800 audit(1590431661.203:406): pid=32336 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=130 res=0
18:34:21 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:21 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:21 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:21 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x3c, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x6c}}, 0x0)

18:34:22 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:22 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

18:34:22 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x3c, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x6c}}, 0x0)

18:34:22 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:22 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:24 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)

18:34:24 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:24 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x50, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x3, 0x0, 0x1f}}]}]}}}]}, 0x80}}, 0x0)

18:34:24 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:24 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:24 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:25 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x50, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x0, 0x1f}}]}]}}}]}, 0x80}}, 0x0)

18:34:25 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:25 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:25 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)

18:34:25 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x50, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x0, 0x1f}}]}]}}}]}, 0x80}}, 0x0)

18:34:25 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:25 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:27 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:27 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x50, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x0, 0x1f}}]}]}}}]}, 0x80}}, 0x0)

18:34:27 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:27 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)

18:34:27 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:27 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1448.449880][   T27] kauditd_printk_skb: 58 callbacks suppressed
[ 1448.449901][   T27] audit: type=1804 audit(1590431667.913:465): pid=32544 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1101/file0/bus" dev="loop4" ino=145 res=1
18:34:28 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1448.541837][   T27] audit: type=1804 audit(1590431667.953:466): pid=32544 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1101/file0/bus" dev="loop4" ino=145 res=1
[ 1448.567795][   T27] audit: type=1804 audit(1590431667.953:467): pid=32544 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1101/file0/bus" dev="loop4" ino=145 res=1
[ 1448.595816][   T27] audit: type=1804 audit(1590431667.993:468): pid=32559 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/806/bus" dev="sda1" ino=15783 res=1
[ 1448.621194][   T27] audit: type=1800 audit(1590431667.993:469): pid=32559 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15783 res=0
[ 1448.641446][   T27] audit: type=1804 audit(1590431667.993:470): pid=32559 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/806/bus" dev="sda1" ino=15783 res=1
[ 1448.665292][   T27] audit: type=1804 audit(1590431667.993:471): pid=32559 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/806/bus" dev="sda1" ino=15783 res=1
[ 1448.689569][   T27] audit: type=1800 audit(1590431667.993:472): pid=32559 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15783 res=0
[ 1448.709974][   T27] audit: type=1804 audit(1590431668.123:473): pid=32552 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/781/bus" dev="sda1" ino=15843 res=1
18:34:28 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x50, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_RATE64={0xc, 0x8, 0x2206205960271cbc}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x3}}]}]}}}]}, 0x80}}, 0x0)

18:34:28 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

[ 1448.734784][   T27] audit: type=1800 audit(1590431668.123:474): pid=32552 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15843 res=0
18:34:28 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)

18:34:28 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x44, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x3}}]}]}}}]}, 0x74}}, 0x0)

18:34:28 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x30, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x60}}, 0x0)

18:34:30 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:30 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:30 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:30 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x30, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x60}}, 0x0)

18:34:30 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:30 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:31 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x30, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x60}}, 0x0)

18:34:31 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:31 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:31 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x44, 0x2, {{}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1, 0x3, 0x4}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x74}}, 0x0)

18:34:31 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(0xffffffffffffffff, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:31 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x64}}, 0x0)

18:34:34 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:34 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:34 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:34 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:34 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:34 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x64}}, 0x0)

18:34:34 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}]}}}]}, 0x64}}, 0x0)

[ 1454.800329][   T27] kauditd_printk_skb: 28 callbacks suppressed
[ 1454.800350][   T27] audit: type=1804 audit(1590431674.264:503): pid=32684 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/784/bus" dev="sda1" ino=16316 res=1
18:34:34 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1455.032325][   T27] audit: type=1800 audit(1590431674.304:504): pid=32684 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16316 res=0
18:34:34 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0)

18:34:34 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1455.107026][   T27] audit: type=1804 audit(1590431674.314:505): pid=32679 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1106/file0/bus" dev="loop4" ino=152 res=1
[ 1455.190214][   T27] audit: type=1804 audit(1590431674.314:506): pid=32680 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/808/bus" dev="sda1" ino=16313 res=1
[ 1455.221157][   T27] audit: type=1800 audit(1590431674.314:507): pid=32680 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16313 res=0
[ 1455.294080][   T27] audit: type=1804 audit(1590431674.314:508): pid=32680 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/808/bus" dev="sda1" ino=16313 res=1
18:34:35 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0)

18:34:35 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1455.572150][   T27] audit: type=1804 audit(1590431674.324:509): pid=32679 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1106/file0/bus" dev="loop4" ino=152 res=1
[ 1455.702232][   T27] audit: type=1804 audit(1590431674.344:510): pid=32679 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1106/file0/bus" dev="loop4" ino=152 res=1
[ 1455.781284][   T27] audit: type=1804 audit(1590431674.344:511): pid=32680 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/808/bus" dev="sda1" ino=16313 res=1
[ 1455.945835][   T27] audit: type=1800 audit(1590431674.344:512): pid=32680 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16313 res=0
18:34:37 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:37 executing program 3:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:37 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:37 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0)

18:34:37 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:37 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:37 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:37 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:38 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:38 executing program 3:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:38 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:38 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:40 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:40 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00')
mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
open(&(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0)

18:34:40 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:40 executing program 3:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:40 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:40 executing program 1:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1460.897714][   T27] kauditd_printk_skb: 42 callbacks suppressed
[ 1460.897731][   T27] audit: type=1804 audit(1590431680.364:555): pid=352 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/811/bus" dev="sda1" ino=16362 res=1
[ 1461.034285][   T27] audit: type=1800 audit(1590431680.364:556): pid=352 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16362 res=0
[ 1461.053563][   T27] audit: type=1804 audit(1590431680.364:557): pid=352 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/811/bus" dev="sda1" ino=16362 res=1
18:34:40 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

[ 1461.076756][   T27] audit: type=1804 audit(1590431680.374:558): pid=352 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/811/bus" dev="sda1" ino=16362 res=1
[ 1461.104110][   T27] audit: type=1800 audit(1590431680.374:559): pid=352 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16362 res=0
[ 1461.130349][   T27] audit: type=1804 audit(1590431680.434:560): pid=353 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/787/bus" dev="sda1" ino=16331 res=1
[ 1461.164143][   T27] audit: type=1800 audit(1590431680.434:561): pid=353 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16331 res=0
18:34:40 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000380)={0x0, 0x0, 0x6, [], 0x0})
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4ed97714}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1461.188914][   T27] audit: type=1804 audit(1590431680.444:562): pid=354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/812/file0/bus" dev="loop5" ino=157 res=1
[ 1461.366476][   T27] audit: type=1800 audit(1590431680.444:563): pid=354 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=157 res=0
[ 1461.429408][   T27] audit: type=1804 audit(1590431680.494:564): pid=358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1110/bus" dev="sda1" ino=16312 res=1
18:34:40 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:41 executing program 1:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:41 executing program 3:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:41 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:43 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000380)={0x0, 0x0, 0x6, [], 0x0})
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4ed97714}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:43 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:43 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:43 executing program 3:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:43 executing program 1:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:43 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:43 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:44 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:44 executing program 1:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:44 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:44 executing program 3:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:44 executing program 0:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000380)={0x0, 0x0, 0x6, [], 0x0})
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00')
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xc1}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4ed97714}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:44 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:46 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:46 executing program 1:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:46 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:46 executing program 0:

18:34:46 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:46 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:46 executing program 0:

[ 1467.071830][   T27] kauditd_printk_skb: 65 callbacks suppressed
[ 1467.071901][   T27] audit: type=1804 audit(1590431686.534:630): pid=502 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1114/bus" dev="sda1" ino=16320 res=1
[ 1467.332937][   T27] audit: type=1804 audit(1590431686.564:631): pid=502 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1114/bus" dev="sda1" ino=16320 res=1
18:34:46 executing program 0:

[ 1467.444453][   T27] audit: type=1804 audit(1590431686.574:632): pid=502 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1114/bus" dev="sda1" ino=16320 res=1
[ 1467.501682][   T27] audit: type=1804 audit(1590431686.624:633): pid=503 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/791/bus" dev="sda1" ino=16327 res=1
18:34:47 executing program 0:

[ 1467.615659][   T27] audit: type=1800 audit(1590431686.624:634): pid=503 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16327 res=0
18:34:47 executing program 0:

[ 1467.761008][   T27] audit: type=1804 audit(1590431686.714:635): pid=505 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/819/bus" dev="sda1" ino=16316 res=1
[ 1467.844550][   T27] audit: type=1800 audit(1590431686.714:636): pid=505 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16316 res=0
18:34:47 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:47 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

[ 1467.929111][   T27] audit: type=1804 audit(1590431686.724:637): pid=516 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/815/file0/bus" dev="sda1" ino=16314 res=1
[ 1468.004671][   T27] audit: type=1800 audit(1590431686.724:638): pid=516 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16314 res=0
[ 1468.075285][   T27] audit: type=1804 audit(1590431686.734:639): pid=516 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/815/file0/bus" dev="sda1" ino=16314 res=1
18:34:49 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(0x0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:49 executing program 4:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:49 executing program 1:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:49 executing program 0:

18:34:49 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:49 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:49 executing program 0:

18:34:50 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(0x0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:50 executing program 0:

18:34:50 executing program 0:

18:34:50 executing program 0:

18:34:50 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:50 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:50 executing program 4:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:50 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:50 executing program 0:

[ 1471.212711][  T590] FAT-fs (loop3): bogus number of reserved sectors
[ 1471.219318][  T590] FAT-fs (loop3): Can't find a valid FAT filesystem
18:34:50 executing program 0:

18:34:50 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e21, @private}, 0x10, 0x0}, 0x0)

18:34:51 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="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", 0x112}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x40)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

[ 1471.677634][  T620] ptrace attach of "/root/syz-executor.0"[619] was attempted by "/root/syz-executor.0"[620]
18:34:53 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(0x0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:53 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000801, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)

18:34:53 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:53 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:34:53 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:53 executing program 4:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1473.697576][  T632] FAT-fs (loop3): bogus number of reserved sectors
[ 1473.706926][  T632] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1473.739537][   T27] kauditd_printk_skb: 30 callbacks suppressed
[ 1473.739557][   T27] audit: type=1804 audit(1590431693.195:670): pid=632 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/795/file0/bus" dev="sda1" ino=16338 res=1
[ 1473.827341][   T27] audit: type=1800 audit(1590431693.195:671): pid=632 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16338 res=0
[ 1473.847568][   T27] audit: type=1804 audit(1590431693.285:672): pid=647 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/823/bus" dev="sda1" ino=16317 res=1
[ 1473.872758][   T27] audit: type=1800 audit(1590431693.285:673): pid=647 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16317 res=0
[ 1473.957154][   T27] audit: type=1804 audit(1590431693.315:674): pid=653 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1117/file0/bus" dev="sda1" ino=16311 res=1
[ 1473.991261][   T27] audit: type=1804 audit(1590431693.315:675): pid=653 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1117/file0/bus" dev="sda1" ino=16311 res=1
[ 1474.022997][   T27] audit: type=1804 audit(1590431693.315:676): pid=653 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1117/file0/bus" dev="sda1" ino=16311 res=1
[ 1474.097608][   T27] audit: type=1804 audit(1590431693.405:677): pid=649 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/818/bus" dev="sda1" ino=16309 res=1
[ 1474.143950][   T27] audit: type=1800 audit(1590431693.405:678): pid=649 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16309 res=0
[ 1474.223860][   T27] audit: type=1804 audit(1590431693.405:679): pid=649 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/818/bus" dev="sda1" ino=16309 res=1
18:34:54 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:54 executing program 5:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:54 executing program 4:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:54 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:54 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "b2977fa88d87f8ac00c639665b42d8756a614ad76143efc1", "67cc09ae1b0205a479c6f185807d54bc8c0d886aecd37be1edc179aac839b0b4"}}}}}}, 0x0)

[ 1474.714879][  T670] FAT-fs (loop3): bogus number of reserved sectors
[ 1474.731013][  T670] FAT-fs (loop3): Can't find a valid FAT filesystem
18:34:54 executing program 0:
syz_read_part_table(0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000000)="adf2ddc2273054bc013d784b8dfd13d0ee61b744ccb1496bf7c5f48ee95caf1326cb8b5c505cb2671cbd3a0a3294f7c36ff60c7de6b50be04a3e4cdfc2826306a7b54f3c832797707021979a358446a05447900d746c946dcb74f8954cee3511cdab5e6e07fdd8a9315784c34a3f40c1b8959c30d1f532f1", 0x78, 0x80800000}, {&(0x7f00000000c0)="9db8b5e982516771b8b30eb67ddd7e6953ee5c5fbf19e4cf32f63bb91e8d6bb621c4c3ec00add5f3f89cd7d04b95576581cc40560c5d075bb89875b6dba7541acf97e9754e884e0f5dec5c2ee5edbc896cf6409cbfe704b1d2cffe54989ec0acd41db0f9cec88519d5997b39efcdaa8a90e73cfff50cc3260958", 0xfffffe34, 0x9}, {&(0x7f0000000140)="4dfb3979f86aa69d2acceeed1e3ca138c8a8731eb57a73f08c8741c735a4ece8604b1c4ba67b4d88cb567a126a5a4dc4fc2900be9bc5bc16497835897a0cd70a4ff73fccc16f86da60b8e5870800"/92, 0x5c, 0x3}])
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

[ 1474.780570][  T686] sit: non-ECT from 0.0.0.0 with TOS=0x2
[ 1474.787831][  T687] sit: non-ECT from 0.0.0.0 with TOS=0x2
18:34:56 executing program 5:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:56 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:56 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:56 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:56 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:56 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

18:34:56 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x40, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2f}], "000022ebffff0400"}}}}}}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

[ 1476.930958][  T719] FAT-fs (loop1): bogus number of reserved sectors
[ 1476.954503][  T719] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1476.966106][  T722] FAT-fs (loop3): bogus number of reserved sectors
[ 1476.972826][  T722] FAT-fs (loop3): Can't find a valid FAT filesystem
18:34:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000040, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r5 = accept4(r0, 0x0, 0x0, 0x80800)
socket$inet6(0xa, 0x80002, 0x0)
r6 = socket(0x11, 0x3, 0x0)
bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800058110308d9123127ecce6616f3f6db1c00010000000000210049740000000000000006ad8e5ecc326d3a09ffc200000000000000000000e000"}, 0x80)
getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
r7 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8914, &(0x7f0000000000)={'lo\x00'})
sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1}}, 0x0)
sendto$inet6(r5, &(0x7f00000000c0), 0xffffffeb, 0x0, 0x0, 0xfffffffffffffdf0)

18:34:57 executing program 5:
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:57 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:57 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:57 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1477.884893][  T756] FAT-fs (loop1): bogus number of reserved sectors
[ 1477.924086][  T756] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1477.966431][  T764] FAT-fs (loop3): bogus number of reserved sectors
[ 1477.989389][  T764] FAT-fs (loop3): Can't find a valid FAT filesystem
18:34:57 executing program 0:
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000008000100000000003000058008000100756470001c0002800800020000000000080001000000000008000200000000000800010065746800a4d528"], 0xa4}}, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x0, 0x0, 0x2})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000c00000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

18:34:58 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:58 executing program 5:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1478.825459][  T782] FAT-fs (loop1): bogus number of reserved sectors
[ 1478.832433][  T782] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1478.880705][   T27] kauditd_printk_skb: 38 callbacks suppressed
[ 1478.880786][   T27] audit: type=1804 audit(1590431698.345:718): pid=782 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/822/file0/bus" dev="sda1" ino=15860 res=1
[ 1478.930234][   T27] audit: type=1800 audit(1590431698.375:719): pid=782 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15860 res=0
[ 1478.953847][   T27] audit: type=1804 audit(1590431698.375:720): pid=782 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/822/file0/bus" dev="sda1" ino=15860 res=1
[ 1478.980599][   T27] audit: type=1804 audit(1590431698.375:721): pid=782 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/822/file0/bus" dev="sda1" ino=15860 res=1
[ 1479.007977][   T27] audit: type=1800 audit(1590431698.375:722): pid=782 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15860 res=0
[ 1479.043507][   T27] audit: type=1804 audit(1590431698.505:723): pid=787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/827/file0/bus" dev="sda1" ino=15955 res=1
[ 1479.073438][   T27] audit: type=1800 audit(1590431698.505:724): pid=787 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15955 res=0
18:34:59 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:59 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:59 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:34:59 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
nanosleep(&(0x7f00000001c0)={0x77359400}, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x34, 0x3e9, 0x0, 0x0, 0x0, {0xb6}}, 0x34}}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:34:59 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:34:59 executing program 5:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1479.976808][   T27] audit: type=1804 audit(1590431699.435:725): pid=804 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1121/bus" dev="sda1" ino=16114 res=1
[ 1480.017086][  T815] FAT-fs (loop1): bogus number of reserved sectors
[ 1480.023912][  T813] FAT-fs (loop3): bogus number of reserved sectors
[ 1480.035289][  T815] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1480.044006][  T813] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1480.053333][   T27] audit: type=1804 audit(1590431699.475:726): pid=804 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1121/bus" dev="sda1" ino=16114 res=1
18:34:59 executing program 0:
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="59f1bcf8ff7b8347", @ANYRES16, @ANYBLOB="00042abd70000000000003000000415c7821f00099352f"], 0x14}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="05a237", @ANYRES16, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564"], 0x3}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100686cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0)

[ 1480.101605][   T27] audit: type=1804 audit(1590431699.475:727): pid=804 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1121/bus" dev="sda1" ino=16114 res=1
18:34:59 executing program 0:
r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\b\x00\x00\x00\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe9\xaa\x9b\xc3\x14\xd2\xd1y\x1f\x9e\x856\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce\x00\x00\x00\x00\xc9\xad\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\xb8\xd9\xa3\xc4p\xf4\\>A\x11U\x99\x8d\xa3\x86\xb7\x1d\x87j\xd3\xc4\xdf\x13/\x97Yy\x8b{\x1df\x8d/\x90\xd3<\xf8\x18\xa4\x88\xcf\x048\xb4\xbe\x00\x00\xb7\xd6\xa5&);\x1br\xd2\xa4\xba\x8b\xa7\x15\xbe\x95\xeb\x1bB\xacoyP\xbb\x1c\xb9S-\xe0oK\xac\x00;S\x8a\x01\xd2\xca\xa3\x1c]<\x04\xaf\x04\x9a\x9d\x84D\a\x00\x00F\xc5V\xc6\xfa\x8e\v\xe1\x82\x03`\xf8\xca\xf4\x89\r^Z44\x91\xeb\xf4$\xf3\x1d\xd5\xbd\xb6ZZ\xd8\xfdS\r\x98\x06/\x9a%m\xcf\xab u\xa6Fw\xde\xb4?\r\xbdK\xfb\xf2\x13\xb3\xfa\x00\xaaP\xc9t\x7f;A Y\x84\x17\x14\xa8\xb5\x0f\xc3i\x9a\x87W\x90h.\x8b\xf5\xf9\xc1\xf04\x9a\xf9DB|L\xbc^n\xd5\x85\xd7\xaf-}\xce\x0e\xcc{\xb1\x9d_\xb2BmU\xc2\xad2q\xd5t&v\x89O\xf0+Q?\xf5\x1eV\x8d[\x98\x11\f#\x13\xc7\\3=\xd6\x00\x11\x9d\xca\x9d\xd9\x92\xcc\xf7\xfb\xd3\bGy\x98\x1b\xe7\x86i\xe1.\x1f\x9e\x8cPFYi\x94\x13\xddm\x9c\xbfV\xe7^@\xe0\xa3\xa5(\f\x18>94\xedZ\xa7\xe4\xb2\xb6.\bY\xa9\xff\xbb', 0x0)
pwrite64(r0, &(0x7f00000006c0)="2fa30b86560ade30954a085347e87281ed4ae0ebdd914a1049ff6105b97279b6fadb832a266988bceb6ac8fcb39e95dbd07b8be37e37f84d34105562", 0x3c, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x0)
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000000)='./file0\x00')

18:35:00 executing program 0:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x57}, {&(0x7f0000000380)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d", 0x6}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)

18:35:00 executing program 0:
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000200000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[ 1480.618374][  T848] ptrace attach of "/root/syz-executor.0"[847] was attempted by "/root/syz-executor.0"[848]
18:35:00 executing program 0:
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000200000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

18:35:00 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1480.891356][  T855] FAT-fs (loop3): bogus number of reserved sectors
[ 1480.898247][  T855] FAT-fs (loop3): Can't find a valid FAT filesystem
18:35:02 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:02 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:02 executing program 5:
syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:02 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:02 executing program 0:
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

18:35:02 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1482.993648][  T873] FAT-fs (loop1): bogus number of reserved sectors
[ 1483.007560][  T873] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1483.042287][  T878] FAT-fs (loop3): bogus number of reserved sectors
[ 1483.069100][  T886] FAT-fs (loop4): bogus number of reserved sectors
[ 1483.074987][  T878] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1483.156667][  T886] FAT-fs (loop4): Can't find a valid FAT filesystem
18:35:02 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0xc004743e, &(0x7f0000000680)='&@[\x00')

18:35:03 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:03 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:03 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:03 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:03 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000016012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c954"}, 0x80)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0)
ftruncate(r2, 0x2008002)
sendfile(r0, r2, 0x0, 0x201000)

[ 1484.029903][  T924] FAT-fs (loop3): bogus number of reserved sectors
[ 1484.043391][  T924] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1484.103660][   T27] kauditd_printk_skb: 23 callbacks suppressed
[ 1484.103679][   T27] audit: type=1804 audit(1590431703.566:751): pid=927 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/830/bus" dev="sda1" ino=16363 res=1
[ 1484.138393][   T27] audit: type=1800 audit(1590431703.576:752): pid=927 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16363 res=0
[ 1484.158211][   T27] audit: type=1804 audit(1590431703.606:753): pid=937 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/802/file0/bus" dev="sda1" ino=16366 res=1
[ 1484.183660][   T27] audit: type=1800 audit(1590431703.606:754): pid=937 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16366 res=0
[ 1484.203498][   T27] audit: type=1804 audit(1590431703.616:755): pid=938 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/825/file0/bus" dev="sda1" ino=16372 res=1
[ 1484.229744][   T27] audit: type=1800 audit(1590431703.616:756): pid=938 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16372 res=0
[ 1484.249890][   T27] audit: type=1804 audit(1590431703.626:757): pid=938 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/825/file0/bus" dev="sda1" ino=16372 res=1
[ 1484.273696][   T27] audit: type=1804 audit(1590431703.626:758): pid=938 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/825/file0/bus" dev="sda1" ino=16372 res=1
[ 1484.299518][   T27] audit: type=1800 audit(1590431703.626:759): pid=938 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16372 res=0
[ 1484.329716][  T933] FAT-fs (loop4): bogus number of reserved sectors
[ 1484.329878][  T929] FAT-fs (loop1): bogus number of reserved sectors
[ 1484.340735][  T933] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1484.363882][   T27] audit: type=1804 audit(1590431703.716:760): pid=941 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1123/bus" dev="sda1" ino=16375 res=1
18:35:03 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1484.405865][  T929] FAT-fs (loop1): Can't find a valid FAT filesystem
18:35:04 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:04 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:04 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:04 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1485.034544][  T964] FAT-fs (loop3): bogus number of reserved sectors
[ 1485.048110][  T964] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1485.192427][  T973] FAT-fs (loop1): bogus number of reserved sectors
[ 1485.199426][  T973] FAT-fs (loop1): Can't find a valid FAT filesystem
18:35:05 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:05 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:05 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:05 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:05 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1486.493740][  T991] FAT-fs (loop3): bogus number of reserved sectors
[ 1486.520039][  T991] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1486.544441][  T998] FAT-fs (loop1): bogus number of reserved sectors
[ 1486.561330][  T997] FAT-fs (loop4): bogus number of reserved sectors
[ 1486.569369][  T998] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1486.577219][  T997] FAT-fs (loop4): Can't find a valid FAT filesystem
18:35:06 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:06 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:06 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:06 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1487.453230][ T1027] FAT-fs (loop3): bogus number of reserved sectors
[ 1487.478751][ T1027] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1487.556035][ T1034] FAT-fs (loop1): bogus number of reserved sectors
[ 1487.563085][ T1035] FAT-fs (loop5): bogus number of reserved sectors
[ 1487.569966][ T1042] FAT-fs (loop4): bogus number of reserved sectors
[ 1487.578427][ T1034] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1487.582441][ T1035] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1487.595780][ T1042] FAT-fs (loop4): Can't find a valid FAT filesystem
18:35:07 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:07 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1488.529603][ T1055] FAT-fs (loop3): bogus number of reserved sectors
[ 1488.536155][ T1055] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1488.653764][ T1060] FAT-fs (loop5): bogus number of reserved sectors
[ 1488.663226][ T1060] FAT-fs (loop5): Can't find a valid FAT filesystem
18:35:08 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:08 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:08 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:08 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:08 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:08 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1489.531142][ T1070] FAT-fs (loop5): bogus number of reserved sectors
[ 1489.542269][ T1070] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1489.611363][   T27] kauditd_printk_skb: 40 callbacks suppressed
[ 1489.611387][   T27] audit: type=1804 audit(1590431709.076:801): pid=1070 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/835/file0/bus" dev="sda1" ino=16327 res=1
[ 1489.646875][   T27] audit: type=1800 audit(1590431709.076:802): pid=1070 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16327 res=0
[ 1489.657726][ T1074] FAT-fs (loop1): bogus number of reserved sectors
[ 1489.667687][ T1077] FAT-fs (loop4): bogus number of reserved sectors
[ 1489.680319][ T1077] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1489.680828][ T1076] FAT-fs (loop3): bogus number of reserved sectors
[ 1489.704087][   T27] audit: type=1804 audit(1590431709.166:803): pid=1089 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/829/file0/bus" dev="sda1" ino=16318 res=1
[ 1489.730643][   T27] audit: type=1800 audit(1590431709.166:804): pid=1089 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16318 res=0
[ 1489.751195][   T27] audit: type=1804 audit(1590431709.166:805): pid=1089 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/829/file0/bus" dev="sda1" ino=16318 res=1
[ 1489.765290][ T1076] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1489.782486][   T27] audit: type=1804 audit(1590431709.176:806): pid=1096 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1126/file0/bus" dev="sda1" ino=16315 res=1
[ 1489.816162][ T1074] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1489.915050][   T27] audit: type=1804 audit(1590431709.186:807): pid=1096 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1126/file0/bus" dev="sda1" ino=16315 res=1
[ 1489.950044][   T27] audit: type=1804 audit(1590431709.186:808): pid=1089 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/829/file0/bus" dev="sda1" ino=16318 res=1
18:35:09 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1489.996306][   T27] audit: type=1800 audit(1590431709.186:809): pid=1089 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16318 res=0
[ 1490.066020][   T27] audit: type=1804 audit(1590431709.216:810): pid=1096 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1126/file0/bus" dev="sda1" ino=16315 res=1
18:35:09 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:09 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:09 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:09 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:10 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1490.506542][ T1115] FAT-fs (loop5): bogus number of reserved sectors
[ 1490.516857][ T1115] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1490.623455][ T1124] FAT-fs (loop3): bogus number of reserved sectors
[ 1490.636240][ T1124] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1490.658354][ T1127] FAT-fs (loop1): bogus number of reserved sectors
[ 1490.666506][ T1128] FAT-fs (loop4): bogus number of reserved sectors
[ 1490.675491][ T1127] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1490.683526][ T1128] FAT-fs (loop4): Can't find a valid FAT filesystem
18:35:12 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:12 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:12 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:12 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:12 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:12 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1492.661432][ T1152] FAT-fs (loop5): bogus number of reserved sectors
[ 1492.671270][ T1152] FAT-fs (loop5): Can't find a valid FAT filesystem
18:35:12 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1492.731410][ T1158] FAT-fs (loop1): bogus number of reserved sectors
[ 1492.752783][ T1158] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1492.760357][ T1159] FAT-fs (loop4): bogus number of reserved sectors
[ 1492.767496][ T1160] FAT-fs (loop3): bogus number of reserved sectors
[ 1492.792751][ T1159] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1492.803458][ T1160] FAT-fs (loop3): Can't find a valid FAT filesystem
18:35:12 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:13 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:13 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:13 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:13 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1493.718464][ T1199] FAT-fs (loop4): bogus number of reserved sectors
[ 1493.723812][ T1204] FAT-fs (loop3): bogus number of reserved sectors
[ 1493.725055][ T1199] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1493.742498][ T1204] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1493.771307][ T1201] FAT-fs (loop5): bogus number of reserved sectors
[ 1493.777856][ T1201] FAT-fs (loop5): Can't find a valid FAT filesystem
18:35:15 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:15 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:15 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:15 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:15 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:15 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1495.705045][ T1230] FAT-fs (loop5): bogus number of reserved sectors
[ 1495.706503][ T1228] FAT-fs (loop4): bogus number of reserved sectors
[ 1495.720920][ T1230] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1495.735234][ T1228] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1495.740261][ T1236] FAT-fs (loop3): bogus number of reserved sectors
18:35:15 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1495.760522][ T1236] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1495.788574][ T1237] FAT-fs (loop1): bogus number of reserved sectors
[ 1495.795204][   T27] kauditd_printk_skb: 33 callbacks suppressed
[ 1495.795236][   T27] audit: type=1804 audit(1590431715.257:844): pid=1230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/839/file0/bus" dev="sda1" ino=16366 res=1
[ 1495.836048][ T1237] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1495.872582][   T27] audit: type=1800 audit(1590431715.257:845): pid=1230 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16366 res=0
[ 1496.003317][   T27] audit: type=1804 audit(1590431715.257:846): pid=1244 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1130/file0/bus" dev="sda1" ino=16375 res=1
[ 1496.041047][   T27] audit: type=1804 audit(1590431715.257:847): pid=1244 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1130/file0/bus" dev="sda1" ino=16375 res=1
[ 1496.069578][   T27] audit: type=1804 audit(1590431715.267:848): pid=1244 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1130/file0/bus" dev="sda1" ino=16375 res=1
18:35:15 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1496.172243][   T27] audit: type=1804 audit(1590431715.317:849): pid=1250 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/832/file0/bus" dev="sda1" ino=16312 res=1
[ 1496.233608][   T27] audit: type=1800 audit(1590431715.317:850): pid=1250 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16312 res=0
[ 1496.259477][   T27] audit: type=1804 audit(1590431715.327:851): pid=1250 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/832/file0/bus" dev="sda1" ino=16312 res=1
[ 1496.336425][   T27] audit: type=1804 audit(1590431715.327:852): pid=1249 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/811/file0/bus" dev="sda1" ino=16313 res=1
[ 1496.479469][   T27] audit: type=1800 audit(1590431715.327:853): pid=1249 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16313 res=0
18:35:16 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(0x0, 0xb)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:16 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:16 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(0x0, 0xb)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:16 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1496.765038][ T1277] FAT-fs (loop1): bogus number of reserved sectors
[ 1496.776386][ T1280] FAT-fs (loop4): bogus number of reserved sectors
[ 1496.779048][ T1277] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1496.783105][ T1280] FAT-fs (loop4): Can't find a valid FAT filesystem
18:35:18 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:18 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:18 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:18 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(0x0, 0xb)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:18 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:18 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1498.765560][ T1302] FAT-fs (loop3): invalid media value (0x00)
[ 1498.778635][ T1302] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1498.828967][ T1301] FAT-fs (loop4): bogus number of reserved sectors
[ 1498.835849][ T1304] FAT-fs (loop1): bogus number of reserved sectors
[ 1498.842596][ T1307] FAT-fs (loop5): bogus number of reserved sectors
[ 1498.854113][ T1301] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1498.861430][ T1307] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1498.868469][ T1304] FAT-fs (loop1): Can't find a valid FAT filesystem
18:35:18 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:18 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:19 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x0, &(0x7f0000000180), 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:19 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:19 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:19 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1499.783423][ T1348] FAT-fs (loop5): bogus number of reserved sectors
[ 1499.792557][ T1348] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1499.865791][ T1352] FAT-fs (loop3): invalid media value (0x00)
[ 1499.872141][ T1352] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1499.894448][ T1355] FAT-fs (loop1): bogus number of reserved sectors
[ 1499.911534][ T1350] FAT-fs (loop4): bogus number of reserved sectors
[ 1499.912329][ T1355] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1500.008735][ T1350] FAT-fs (loop4): Can't find a valid FAT filesystem
18:35:21 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:21 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:21 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:21 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:21 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1501.915093][ T1381] FAT-fs (loop4): bogus number of reserved sectors
[ 1501.924453][ T1382] FAT-fs (loop3): invalid media value (0x00)
[ 1501.943125][ T1382] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1501.954586][ T1384] FAT-fs (loop1): bogus number of reserved sectors
[ 1501.963622][ T1386] FAT-fs (loop5): bogus number of reserved sectors
[ 1501.975876][ T1381] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1501.991101][ T1384] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1502.005446][ T1386] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1502.040570][   T27] kauditd_printk_skb: 34 callbacks suppressed
[ 1502.040656][   T27] audit: type=1804 audit(1590431721.507:888): pid=1399 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/836/file0/bus" dev="sda1" ino=16304 res=1
18:35:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1502.194532][   T27] audit: type=1804 audit(1590431721.547:889): pid=1396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1134/file0/bus" dev="sda1" ino=16305 res=1
[ 1502.356624][   T27] audit: type=1804 audit(1590431721.547:890): pid=1396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1134/file0/bus" dev="sda1" ino=16305 res=1
18:35:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:21 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1502.485779][   T27] audit: type=1800 audit(1590431721.547:891): pid=1399 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16304 res=0
[ 1502.576530][   T27] audit: type=1804 audit(1590431721.547:892): pid=1399 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/836/file0/bus" dev="sda1" ino=16304 res=1
18:35:22 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:22 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1502.770968][   T27] audit: type=1804 audit(1590431721.557:893): pid=1396 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1134/file0/bus" dev="sda1" ino=16305 res=1
[ 1502.771975][ T1427] FAT-fs (loop5): bogus number of reserved sectors
[ 1502.803711][ T1427] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1502.935790][   T27] audit: type=1804 audit(1590431721.557:894): pid=1382 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/814/file0/bus" dev="sda1" ino=16311 res=1
[ 1503.020298][   T27] audit: type=1800 audit(1590431721.557:895): pid=1382 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16311 res=0
[ 1503.065357][   T27] audit: type=1804 audit(1590431721.557:896): pid=1399 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/836/file0/bus" dev="sda1" ino=16304 res=1
[ 1503.114711][   T27] audit: type=1800 audit(1590431721.557:897): pid=1399 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16304 res=0
18:35:24 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:24 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:24 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:24 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:24 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:24 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{0x0}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:24 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1505.007812][ T1450] FAT-fs (loop4): bogus number of reserved sectors
[ 1505.014790][ T1450] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1505.031187][ T1454] FAT-fs (loop1): bogus number of reserved sectors
[ 1505.040618][ T1454] FAT-fs (loop1): Can't find a valid FAT filesystem
18:35:24 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1505.132666][ T1457] FAT-fs (loop5): bogus number of reserved sectors
[ 1505.171544][ T1458] FAT-fs (loop3): invalid media value (0x00)
[ 1505.198166][ T1457] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1505.274330][ T1458] FAT-fs (loop3): Can't find a valid FAT filesystem
18:35:25 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:25 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r0, 0xb)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:25 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:25 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r0, 0xb)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1506.069195][ T1502] FAT-fs (loop3): invalid media value (0x00)
[ 1506.075268][ T1502] FAT-fs (loop3): Can't find a valid FAT filesystem
18:35:27 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:27 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:27 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:27 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:27 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:27 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r0, 0xb)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1508.142783][ T1518] FAT-fs (loop1): invalid media value (0x00)
[ 1508.152507][ T1520] FAT-fs (loop5): bogus number of reserved sectors
[ 1508.159767][ T1519] FAT-fs (loop3): invalid media value (0x00)
[ 1508.167459][ T1525] FAT-fs (loop4): bogus number of reserved sectors
[ 1508.169836][ T1518] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1508.180146][ T1525] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1508.184577][ T1520] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1508.196153][ T1519] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1508.245482][   T27] kauditd_printk_skb: 18 callbacks suppressed
[ 1508.245504][   T27] audit: type=1804 audit(1590431727.707:916): pid=1535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/838/file0/bus" dev="sda1" ino=16301 res=1
[ 1508.295088][ T1542] ptrace attach of "/root/syz-executor.0"[1541] was attempted by "/root/syz-executor.0"[1542]
18:35:27 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1508.382089][   T27] audit: type=1804 audit(1590431727.747:917): pid=1520 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/845/file0/bus" dev="sda1" ino=16298 res=1
[ 1508.411442][   T27] audit: type=1800 audit(1590431727.747:918): pid=1520 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16298 res=0
[ 1508.433471][   T27] audit: type=1800 audit(1590431727.747:919): pid=1535 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16301 res=0
[ 1508.586893][   T27] audit: type=1804 audit(1590431727.757:920): pid=1535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/838/file0/bus" dev="sda1" ino=16301 res=1
[ 1508.618568][ T1556] ptrace attach of "/root/syz-executor.0"[1555] was attempted by "/root/syz-executor.0"[1556]
18:35:28 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1508.677469][   T27] audit: type=1804 audit(1590431727.777:922): pid=1538 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/817/file0/bus" dev="sda1" ino=16293 res=1
[ 1508.730731][   T27] audit: type=1800 audit(1590431727.777:923): pid=1538 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16293 res=0
[ 1508.796346][   T27] audit: type=1804 audit(1590431727.757:921): pid=1547 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1136/file0/bus" dev="sda1" ino=16292 res=1
[ 1508.836169][ T1560] ptrace attach of "/root/syz-executor.0"[1559] was attempted by "/root/syz-executor.0"[1560]
18:35:28 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1508.871995][   T27] audit: type=1804 audit(1590431727.777:924): pid=1539 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1136/file0/bus" dev="sda1" ino=16292 res=1
18:35:28 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:28 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1508.960066][   T27] audit: type=1804 audit(1590431727.777:925): pid=1535 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/838/file0/bus" dev="sda1" ino=16301 res=1
18:35:28 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:28 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1509.069128][ T1567] FAT-fs (loop3): invalid media value (0x00)
[ 1509.075333][ T1567] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1509.200694][ T1573] FAT-fs (loop5): bogus number of reserved sectors
[ 1509.200980][ T1575] FAT-fs (loop4): bogus number of reserved sectors
[ 1509.210859][ T1573] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1509.222147][ T1577] FAT-fs (loop1): invalid media value (0x00)
[ 1509.237074][ T1577] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1509.243871][ T1575] FAT-fs (loop4): Can't find a valid FAT filesystem
18:35:30 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f00000193c0)}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:30 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:30 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:30 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:30 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:30 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:30 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1511.219811][ T1602] FAT-fs (loop1): invalid media value (0x00)
[ 1511.242098][ T1602] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1511.266322][ T1607] FAT-fs (loop4): bogus number of reserved sectors
[ 1511.274518][ T1611] FAT-fs (loop5): bogus number of reserved sectors
[ 1511.284997][ T1612] FAT-fs (loop3): invalid media value (0x00)
[ 1511.294410][ T1607] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1511.303419][ T1611] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1511.333276][ T1612] FAT-fs (loop3): Can't find a valid FAT filesystem
18:35:30 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:31 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:31 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:31 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:31 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1512.155620][ T1656] FAT-fs (loop1): invalid media value (0x00)
[ 1512.169621][ T1656] FAT-fs (loop1): Can't find a valid FAT filesystem
18:35:33 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:33 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:33 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f00000193c0)}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:33 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:33 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:33 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1514.247460][ T1671] FAT-fs (loop3): invalid media value (0x00)
[ 1514.253611][ T1671] FAT-fs (loop3): Can't find a valid FAT filesystem
[ 1514.286036][   T27] kauditd_printk_skb: 31 callbacks suppressed
[ 1514.286059][   T27] audit: type=1804 audit(1590431733.748:957): pid=1671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/820/file0/bus" dev="sda1" ino=16320 res=1
[ 1514.353215][ T1680] FAT-fs (loop5): bogus number of reserved sectors
[ 1514.363538][ T1682] FAT-fs (loop4): bogus number of reserved sectors
[ 1514.376243][ T1678] FAT-fs (loop1): invalid media value (0x00)
[ 1514.383240][ T1680] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1514.392079][ T1682] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1514.400206][ T1678] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1514.408876][   T27] audit: type=1800 audit(1590431733.788:958): pid=1671 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16320 res=0
18:35:33 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1514.499196][   T27] audit: type=1804 audit(1590431733.908:959): pid=1693 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/842/file0/bus" dev="sda1" ino=16286 res=1
[ 1514.526459][   T27] audit: type=1800 audit(1590431733.908:960): pid=1693 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16286 res=0
[ 1514.547888][   T27] audit: type=1804 audit(1590431733.908:961): pid=1693 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/842/file0/bus" dev="sda1" ino=16286 res=1
[ 1514.574912][   T27] audit: type=1804 audit(1590431733.918:962): pid=1694 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1139/file0/bus" dev="sda1" ino=16285 res=1
[ 1514.600835][   T27] audit: type=1804 audit(1590431733.918:963): pid=1693 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/842/file0/bus" dev="sda1" ino=16286 res=1
[ 1514.625798][   T27] audit: type=1800 audit(1590431733.918:964): pid=1693 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16286 res=0
[ 1514.650485][   T27] audit: type=1804 audit(1590431733.928:965): pid=1694 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1139/file0/bus" dev="sda1" ino=16285 res=1
[ 1514.785140][   T27] audit: type=1804 audit(1590431733.938:966): pid=1695 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/848/file0/bus" dev="sda1" ino=16284 res=1
18:35:34 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040), 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:34 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:34 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040), 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:34 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:34 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:34 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:34 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040), 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1515.250104][ T1719] FAT-fs (loop1): invalid media value (0x00)
[ 1515.256254][ T1719] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1515.392865][ T1731] FAT-fs (loop5): bogus number of reserved sectors
[ 1515.413009][ T1731] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1515.416319][ T1733] FAT-fs (loop4): invalid media value (0x00)
[ 1515.438029][ T1733] FAT-fs (loop4): Can't find a valid FAT filesystem
18:35:36 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:36 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:36 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, &(0x7f00000193c0)}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:36 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:36 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:36 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:36 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1517.494965][ T1767] FAT-fs (loop5): bogus number of reserved sectors
[ 1517.505039][ T1766] FAT-fs (loop4): invalid media value (0x00)
[ 1517.515871][ T1768] FAT-fs (loop1): invalid media value (0x00)
[ 1517.531148][ T1767] FAT-fs (loop5): Can't find a valid FAT filesystem
18:35:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1517.582662][ T1766] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1517.591258][ T1768] FAT-fs (loop1): Can't find a valid FAT filesystem
18:35:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:37 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:37 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:40 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:40 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:40 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaa, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a1"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:40 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:40 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:35:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1520.613343][ T1833] FAT-fs (loop4): invalid media value (0x00)
[ 1520.620457][ T1837] FAT-fs (loop5): invalid media value (0x00)
[ 1520.632580][ T1833] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1520.664121][ T1837] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1520.691125][ T1834] FAT-fs (loop1): invalid media value (0x00)
[ 1520.697472][ T1834] FAT-fs (loop1): Can't find a valid FAT filesystem
18:35:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1520.712036][   T27] kauditd_printk_skb: 28 callbacks suppressed
[ 1520.712054][   T27] audit: type=1804 audit(1590431740.178:995): pid=1852 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/845/file0/bus" dev="sda1" ino=16265 res=1
18:35:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1520.831713][   T27] audit: type=1800 audit(1590431740.218:996): pid=1852 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16265 res=0
[ 1520.903421][   T27] audit: type=1804 audit(1590431740.218:997): pid=1852 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/845/file0/bus" dev="sda1" ino=16265 res=1
[ 1520.957240][   T27] audit: type=1804 audit(1590431740.218:998): pid=1836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/824/bus" dev="sda1" ino=16281 res=1
18:35:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1521.089842][   T27] audit: type=1800 audit(1590431740.218:999): pid=1836 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16281 res=0
[ 1521.186198][   T27] audit: type=1804 audit(1590431740.228:1000): pid=1852 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/845/file0/bus" dev="sda1" ino=16265 res=1
18:35:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1521.274216][   T27] audit: type=1800 audit(1590431740.228:1001): pid=1852 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16265 res=0
18:35:40 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:40 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:40 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:40 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1521.457297][   T27] audit: type=1804 audit(1590431740.228:1002): pid=1853 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/851/file0/bus" dev="sda1" ino=16263 res=1
[ 1521.532640][   T27] audit: type=1800 audit(1590431740.228:1003): pid=1853 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16263 res=0
[ 1521.572526][   T27] audit: type=1804 audit(1590431740.228:1004): pid=1848 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1142/bus" dev="sda1" ino=16301 res=1
[ 1521.643869][ T1889] FAT-fs (loop1): invalid media value (0x00)
[ 1521.650160][ T1889] FAT-fs (loop1): Can't find a valid FAT filesystem
[ 1521.650609][ T1887] FAT-fs (loop4): invalid media value (0x00)
[ 1521.663090][ T1887] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1521.761880][ T1893] FAT-fs (loop5): invalid media value (0x00)
[ 1521.771440][ T1893] FAT-fs (loop5): Can't find a valid FAT filesystem
18:35:43 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:35:43 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaa, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a1"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:43 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:43 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:43 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1523.690029][ T1916] FAT-fs (loop4): invalid media value (0x00)
[ 1523.698506][ T1916] FAT-fs (loop4): Can't find a valid FAT filesystem
18:35:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1523.783992][ T1921] FAT-fs (loop5): invalid media value (0x00)
[ 1523.866452][ T1921] FAT-fs (loop5): Can't find a valid FAT filesystem
18:35:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:43 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:35:44 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:44 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:46 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xaa, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a1"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:46 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:46 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:46 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:46 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:46 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1526.839709][ T1995] FAT-fs (loop4): invalid media value (0x00)
[ 1526.856557][ T2003] FAT-fs (loop5): invalid media value (0x00)
[ 1526.864594][ T1995] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1526.871893][ T2003] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1526.889032][   T27] kauditd_printk_skb: 29 callbacks suppressed
[ 1526.889054][   T27] audit: type=1804 audit(1590431746.359:1034): pid=2002 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/827/file0/bus" dev="loop3" ino=163 res=1
18:35:46 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1527.078521][   T27] audit: type=1800 audit(1590431746.399:1035): pid=2002 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=163 res=0
18:35:46 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1527.166493][   T27] audit: type=1804 audit(1590431746.409:1036): pid=2019 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1145/file0/bus" dev="sda1" ino=16281 res=1
[ 1527.280445][   T27] audit: type=1804 audit(1590431746.429:1037): pid=2019 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1145/file0/bus" dev="sda1" ino=16281 res=1
18:35:46 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:47 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1527.511398][   T27] audit: type=1804 audit(1590431746.449:1038): pid=2021 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/849/bus" dev="sda1" ino=16265 res=1
[ 1527.624181][   T27] audit: type=1800 audit(1590431746.449:1039): pid=2021 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16265 res=0
18:35:47 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:47 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1527.713170][   T27] audit: type=1804 audit(1590431746.449:1040): pid=2008 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/849/bus" dev="sda1" ino=16265 res=1
[ 1527.777214][   T27] audit: type=1804 audit(1590431746.449:1041): pid=2008 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/849/bus" dev="sda1" ino=16265 res=1
[ 1527.824272][   T27] audit: type=1800 audit(1590431746.449:1042): pid=2008 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16265 res=0
[ 1527.881005][ T2051] FAT-fs (loop5): invalid media value (0x00)
[ 1527.887393][ T2051] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1527.946436][   T27] audit: type=1804 audit(1590431746.459:1043): pid=1995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1145/file0/bus" dev="sda1" ino=16281 res=1
[ 1528.010243][ T2055] FAT-fs (loop4): invalid media value (0x00)
[ 1528.036094][ T2055] FAT-fs (loop4): Can't find a valid FAT filesystem
18:35:49 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xff, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cd"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:49 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:49 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:35:49 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000274", 0x14}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:49 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1529.875380][ T2074] FAT-fs (loop4): invalid media value (0x00)
[ 1529.882526][ T2074] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1529.982580][ T2081] FAT-fs (loop5): invalid media value (0x00)
[ 1530.027283][ T2081] FAT-fs (loop5): Can't find a valid FAT filesystem
18:35:49 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:35:50 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:35:50 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00'}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:50 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:50 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:50 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:50 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00'}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1531.051588][ T2134] FAT-fs (loop4): invalid media value (0x00)
[ 1531.058720][ T2132] FAT-fs (loop5): invalid media value (0x00)
[ 1531.064917][ T2134] FAT-fs (loop4): Can't find a valid FAT filesystem
[ 1531.071801][ T2132] FAT-fs (loop5): Can't find a valid FAT filesystem
18:35:52 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:52 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:52 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:52 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xff, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cd"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:52 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1533.010557][   T27] kauditd_printk_skb: 37 callbacks suppressed
[ 1533.010576][   T27] audit: type=1804 audit(1590431752.479:1081): pid=2161 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/833/file0/bus" dev="loop3" ino=168 res=1
18:35:52 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1533.078595][ T2167] FAT-fs (loop5): invalid media value (0x00)
[ 1533.118523][ T2167] FAT-fs (loop5): Can't find a valid FAT filesystem
[ 1533.144279][   T27] audit: type=1800 audit(1590431752.479:1082): pid=2161 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=168 res=0
[ 1533.163314][   T27] audit: type=1804 audit(1590431752.529:1083): pid=2157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/852/bus" dev="sda1" ino=16330 res=1
[ 1533.283602][   T27] audit: type=1800 audit(1590431752.529:1084): pid=2157 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16330 res=0
[ 1533.437344][   T27] audit: type=1804 audit(1590431752.529:1085): pid=2157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/852/bus" dev="sda1" ino=16330 res=1
18:35:53 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1533.495406][   T27] audit: type=1804 audit(1590431752.539:1086): pid=2157 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/852/bus" dev="sda1" ino=16330 res=1
[ 1533.562203][   T27] audit: type=1800 audit(1590431752.549:1087): pid=2157 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16330 res=0
[ 1533.583000][   T27] audit: type=1804 audit(1590431752.569:1088): pid=2166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1149/bus" dev="sda1" ino=16320 res=1
[ 1533.609642][   T27] audit: type=1804 audit(1590431752.579:1089): pid=2166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1149/bus" dev="sda1" ino=16320 res=1
[ 1533.636540][   T27] audit: type=1804 audit(1590431752.609:1090): pid=2166 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1149/bus" dev="sda1" ino=16320 res=1
18:35:53 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:53 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400", 0x15}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:53 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:53 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00'}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1534.161157][ T2208] FAT-fs (loop5): invalid media value (0x00)
18:35:53 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(0x0, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1534.208082][ T2208] FAT-fs (loop5): Can't find a valid FAT filesystem
18:35:53 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(0x0, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:53 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:54 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:55 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xff, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:55 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(0x0, 0xb)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:55 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:55 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:55 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:55 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:55 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:55 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:55 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:56 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:56 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:56 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:58 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:58 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:58 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:35:58 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x12a, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:35:58 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:58 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(0x0, 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1539.270550][   T27] kauditd_printk_skb: 37 callbacks suppressed
[ 1539.270569][   T27] audit: type=1804 audit(1590431758.740:1128): pid=2336 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/862/bus" dev="sda1" ino=16292 res=1
18:35:58 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1539.458205][   T27] audit: type=1800 audit(1590431758.740:1129): pid=2336 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16292 res=0
[ 1539.479589][   T27] audit: type=1804 audit(1590431758.740:1130): pid=2337 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/857/file0/bus" dev="loop1" ino=177 res=1
18:35:59 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:59 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1539.509520][   T27] audit: type=1800 audit(1590431758.740:1131): pid=2337 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=177 res=0
[ 1539.601533][   T27] audit: type=1804 audit(1590431758.750:1132): pid=2337 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/857/file0/bus" dev="loop1" ino=177 res=1
18:35:59 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:35:59 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x0)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1539.838923][   T27] audit: type=1804 audit(1590431758.760:1133): pid=2337 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/857/file0/bus" dev="loop1" ino=177 res=1
18:35:59 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1539.929453][   T27] audit: type=1800 audit(1590431758.760:1134): pid=2337 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=177 res=0
18:35:59 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:59 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:35:59 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

[ 1540.046617][   T27] audit: type=1804 audit(1590431758.800:1135): pid=2344 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1152/bus" dev="sda1" ino=16265 res=1
[ 1540.076959][   T27] audit: type=1804 audit(1590431758.800:1136): pid=2344 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1152/bus" dev="sda1" ino=16265 res=1
[ 1540.102693][   T27] audit: type=1804 audit(1590431758.810:1137): pid=2344 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1152/bus" dev="sda1" ino=16265 res=1
18:36:01 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x12a, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d78"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:01 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:36:01 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x0)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:01 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:01 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:36:01 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
sendfile(r0, r1, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:01 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x0)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:02 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x12a, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:02 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:02 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:36:02 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:02 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1}, 0x20)
tkill(r1, 0xb)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

18:36:02 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000001c0)=0xdf8, 0x4)
bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)

18:36:02 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:02 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:02 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(0xffffffffffffffff)
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:36:02 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:02 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
syncfs(0xffffffffffffffff)
faccessat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

18:36:03 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:05 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x13f, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:05 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
waitid(0x0, 0x0, 0x0, 0x0, 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x4, 0x5}, 0x0)
pipe(&(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
modify_ldt$write(0x1, 0x0, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
getxattr(0x0, 0x0, 0x0, 0x0)
r3 = creat(0x0, 0x84f04fbb54e1820e)
write$binfmt_script(r3, 0x0, 0x14b)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r5 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x9)
ftruncate(r5, 0x10099b7)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
ftruncate(r6, 0x87fff)

18:36:05 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:05 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:05 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1545.740913][   T27] kauditd_printk_skb: 56 callbacks suppressed
[ 1545.740932][   T27] audit: type=1804 audit(1590431765.210:1194): pid=2531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/863/bus" dev="sda1" ino=16362 res=1
[ 1545.783145][   T27] audit: type=1800 audit(1590431765.210:1195): pid=2531 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16362 res=0
[ 1545.817922][   T27] audit: type=1804 audit(1590431765.220:1196): pid=2531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/863/bus" dev="sda1" ino=16362 res=1
18:36:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1545.879533][   T27] audit: type=1804 audit(1590431765.220:1197): pid=2531 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/863/bus" dev="sda1" ino=16362 res=1
[ 1545.906340][   T27] audit: type=1800 audit(1590431765.220:1198): pid=2531 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16362 res=0
[ 1545.936082][   T27] audit: type=1804 audit(1590431765.250:1199): pid=2533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1157/bus" dev="sda1" ino=16363 res=1
[ 1545.965580][   T27] audit: type=1800 audit(1590431765.250:1200): pid=2533 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16363 res=0
18:36:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1545.989677][   T27] audit: type=1804 audit(1590431765.250:1201): pid=2532 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/866/bus" dev="sda1" ino=16338 res=1
[ 1546.020891][   T27] audit: type=1800 audit(1590431765.250:1202): pid=2532 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16338 res=0
18:36:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1546.048296][   T27] audit: type=1804 audit(1590431765.280:1203): pid=2534 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/847/bus" dev="sda1" ino=16330 res=1
18:36:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(0x0, 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(0x0, 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:05 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(0x0, 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:08 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x13f, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:08 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00')
preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0)

18:36:08 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:08 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:08 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:08 executing program 0:
r0 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000300)=0xfc, 0x4)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000280)=0x5, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20040218, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

18:36:09 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:09 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(0x0, 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:09 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:09 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)

18:36:09 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:11 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x13f, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:11 executing program 0:
r0 = socket$packet(0x11, 0x20000000000003, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @remote}, 0x10)

18:36:11 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:11 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:36:11 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:11 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1551.873040][   T27] kauditd_printk_skb: 29 callbacks suppressed
[ 1551.873058][   T27] audit: type=1804 audit(1590431771.341:1233): pid=2592 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1160/bus" dev="sda1" ino=15833 res=1
[ 1551.930005][ T2598] device lo entered promiscuous mode
[ 1551.936892][ T2591] device lo left promiscuous mode
[ 1551.943344][   T27] audit: type=1804 audit(1590431771.351:1234): pid=2592 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1160/bus" dev="sda1" ino=15833 res=1
[ 1551.970567][   T27] audit: type=1804 audit(1590431771.361:1235): pid=2592 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1160/bus" dev="sda1" ino=15833 res=1
[ 1551.995829][   T27] audit: type=1804 audit(1590431771.361:1236): pid=2594 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/866/bus" dev="sda1" ino=15852 res=1
[ 1552.029038][ T2605] device lo entered promiscuous mode
[ 1552.029215][   T27] audit: type=1800 audit(1590431771.361:1237): pid=2594 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15852 res=0
[ 1552.056365][ T2591] device lo left promiscuous mode
[ 1552.062822][   T27] audit: type=1804 audit(1590431771.361:1238): pid=2594 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/866/bus" dev="sda1" ino=15852 res=1
[ 1552.086558][   T27] audit: type=1804 audit(1590431771.371:1239): pid=2594 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/866/bus" dev="sda1" ino=15852 res=1
[ 1552.113288][   T27] audit: type=1800 audit(1590431771.371:1240): pid=2594 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15852 res=0
18:36:11 executing program 0:

[ 1552.168101][   T27] audit: type=1804 audit(1590431771.451:1241): pid=2597 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/869/bus" dev="sda1" ino=16293 res=1
[ 1552.199225][   T27] audit: type=1800 audit(1590431771.451:1242): pid=2597 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16293 res=0
18:36:11 executing program 0:

18:36:11 executing program 0:

18:36:12 executing program 0:
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1})
r1 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
close(r0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0)

18:36:12 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:12 executing program 0:
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="95431d3b208f", @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @private=0xa010300, @link_local, @private}}}}, 0x0)

18:36:14 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14a, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:14 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:14 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:36:14 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0xe, 0x0, 0x3e4}})

18:36:14 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)

18:36:14 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:14 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)

18:36:14 executing program 0:

18:36:14 executing program 0:

18:36:14 executing program 0:

18:36:14 executing program 0:

18:36:14 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)

18:36:17 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14a, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:17 executing program 0:

18:36:17 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

18:36:17 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:17 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r1, r2, 0x0, 0x8000fffffffe)

18:36:17 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(0x0, 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:17 executing program 0:

[ 1558.111693][   T27] kauditd_printk_skb: 21 callbacks suppressed
[ 1558.111711][   T27] audit: type=1804 audit(1590431777.581:1264): pid=2647 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/871/bus" dev="sda1" ino=16330 res=1
[ 1558.151102][   T27] audit: type=1804 audit(1590431777.581:1265): pid=2646 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1163/bus" dev="sda1" ino=16326 res=1
18:36:17 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

18:36:17 executing program 0:

[ 1558.228454][   T27] audit: type=1804 audit(1590431777.591:1266): pid=2646 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1163/bus" dev="sda1" ino=16326 res=1
[ 1558.252302][   T27] audit: type=1804 audit(1590431777.591:1267): pid=2646 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1163/bus" dev="sda1" ino=16326 res=1
[ 1558.283277][   T27] audit: type=1800 audit(1590431777.621:1269): pid=2647 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16330 res=0
18:36:17 executing program 0:

[ 1558.319579][   T27] audit: type=1804 audit(1590431777.621:1268): pid=2645 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/868/bus" dev="sda1" ino=16338 res=1
[ 1558.350661][   T27] audit: type=1800 audit(1590431777.621:1270): pid=2645 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16338 res=0
18:36:17 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

[ 1558.379026][   T27] audit: type=1804 audit(1590431777.651:1271): pid=2648 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/860/bus" dev="sda1" ino=16323 res=1
[ 1558.407943][   T27] audit: type=1800 audit(1590431777.651:1272): pid=2648 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16323 res=0
18:36:17 executing program 0:

[ 1558.435883][   T27] audit: type=1804 audit(1590431777.791:1273): pid=2657 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir706022859/syzkaller.zmtf34/861/bus" dev="sda1" ino=16362 res=1
18:36:20 executing program 0:

18:36:20 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:20 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x0)

18:36:20 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14a, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:20 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:20 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(0x0, 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:20 executing program 0:

18:36:20 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x0)

18:36:20 executing program 0:

18:36:20 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x0)

18:36:20 executing program 0:

18:36:21 executing program 3:

18:36:23 executing program 0:

18:36:23 executing program 3:

18:36:23 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:23 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14f, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:23 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(0x0, 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:23 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:23 executing program 0:

[ 1564.287157][   T27] kauditd_printk_skb: 16 callbacks suppressed
[ 1564.287175][   T27] audit: type=1804 audit(1590431783.761:1290): pid=2708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1165/bus" dev="sda1" ino=16314 res=1
18:36:23 executing program 3:

[ 1564.356725][   T27] audit: type=1804 audit(1590431783.791:1291): pid=2709 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/873/bus" dev="sda1" ino=16363 res=1
18:36:23 executing program 3:

[ 1564.408176][   T27] audit: type=1800 audit(1590431783.791:1292): pid=2709 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16363 res=0
[ 1564.447318][   T27] audit: type=1804 audit(1590431783.791:1293): pid=2708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1165/bus" dev="sda1" ino=16314 res=1
[ 1564.472564][   T27] audit: type=1804 audit(1590431783.801:1294): pid=2708 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1165/bus" dev="sda1" ino=16314 res=1
18:36:24 executing program 0:

18:36:24 executing program 3:

[ 1564.520773][   T27] audit: type=1804 audit(1590431783.831:1295): pid=2710 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/870/bus" dev="sda1" ino=16368 res=1
[ 1564.547378][   T27] audit: type=1800 audit(1590431783.831:1296): pid=2710 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16368 res=0
18:36:24 executing program 0:

18:36:24 executing program 3:

18:36:24 executing program 0:

18:36:24 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1565.158840][   T27] audit: type=1804 audit(1590431784.631:1297): pid=2726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1166/bus" dev="sda1" ino=15868 res=1
[ 1565.182150][   T27] audit: type=1804 audit(1590431784.641:1298): pid=2726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1166/bus" dev="sda1" ino=15868 res=1
[ 1565.205472][   T27] audit: type=1804 audit(1590431784.641:1299): pid=2726 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1166/bus" dev="sda1" ino=15868 res=1
18:36:26 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14f, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:26 executing program 0:

18:36:26 executing program 3:

18:36:26 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:26 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:26 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:26 executing program 3:

18:36:26 executing program 0:

18:36:26 executing program 3:

18:36:27 executing program 3:

18:36:27 executing program 0:

18:36:27 executing program 3:

18:36:29 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x14f, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:29 executing program 0:

18:36:29 executing program 3:

18:36:29 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:29 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:29 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:29 executing program 3:

[ 1570.438160][   T27] kauditd_printk_skb: 8 callbacks suppressed
[ 1570.438179][   T27] audit: type=1804 audit(1590431789.912:1308): pid=2748 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/872/bus" dev="sda1" ino=15812 res=1
[ 1570.521076][   T27] audit: type=1804 audit(1590431789.912:1309): pid=2748 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/872/bus" dev="sda1" ino=15812 res=1
18:36:30 executing program 3:

18:36:30 executing program 0:

[ 1570.587846][   T27] audit: type=1804 audit(1590431789.922:1310): pid=2748 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/872/bus" dev="sda1" ino=15812 res=1
18:36:30 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1570.664663][   T27] audit: type=1804 audit(1590431790.002:1311): pid=2755 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1168/bus" dev="sda1" ino=15948 res=1
[ 1570.722084][   T27] audit: type=1804 audit(1590431790.012:1312): pid=2755 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1168/bus" dev="sda1" ino=15948 res=1
18:36:30 executing program 3:

18:36:30 executing program 0:

[ 1570.754635][   T27] audit: type=1804 audit(1590431790.022:1313): pid=2754 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/875/bus" dev="sda1" ino=15940 res=1
[ 1570.813096][   T27] audit: type=1800 audit(1590431790.022:1314): pid=2754 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15940 res=0
[ 1570.868820][   T27] audit: type=1804 audit(1590431790.042:1315): pid=2755 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1168/bus" dev="sda1" ino=15948 res=1
[ 1570.915012][   T27] audit: type=1804 audit(1590431790.272:1316): pid=2766 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/876/bus" dev="sda1" ino=15843 res=1
[ 1570.939095][   T27] audit: type=1800 audit(1590431790.272:1317): pid=2766 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15843 res=0
18:36:33 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x152, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:33 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(0x0, 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:33 executing program 0:

18:36:33 executing program 3:

18:36:33 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:33 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:33 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:33 executing program 3:

18:36:33 executing program 0:

18:36:33 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:33 executing program 0:

18:36:33 executing program 3:

18:36:36 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x152, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:36 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:36 executing program 3:

18:36:36 executing program 0:

18:36:36 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:36 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(0x0, 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:36 executing program 3:

18:36:36 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x0)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1576.698798][   T27] kauditd_printk_skb: 12 callbacks suppressed
[ 1576.698871][   T27] audit: type=1804 audit(1590431796.172:1330): pid=2796 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/880/bus" dev="sda1" ino=16363 res=1
18:36:36 executing program 0:

[ 1576.779900][   T27] audit: type=1804 audit(1590431796.192:1331): pid=2797 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1170/bus" dev="sda1" ino=16326 res=1
[ 1576.805561][   T27] audit: type=1800 audit(1590431796.192:1332): pid=2797 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16326 res=0
[ 1576.836932][   T27] audit: type=1800 audit(1590431796.212:1333): pid=2796 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16363 res=0
[ 1576.857269][   T27] audit: type=1804 audit(1590431796.212:1334): pid=2795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/874/bus" dev="sda1" ino=16330 res=1
18:36:36 executing program 3:

18:36:36 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x0)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1576.910110][   T27] audit: type=1800 audit(1590431796.212:1335): pid=2795 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16330 res=0
18:36:36 executing program 0:

[ 1576.960778][   T27] audit: type=1804 audit(1590431796.212:1336): pid=2795 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/874/bus" dev="sda1" ino=16330 res=1
[ 1576.986459][   T27] audit: type=1800 audit(1590431796.212:1337): pid=2795 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16330 res=0
[ 1577.056647][   T27] audit: type=1804 audit(1590431796.382:1338): pid=2805 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/881/bus" dev="sda1" ino=16284 res=1
[ 1577.121926][   T27] audit: type=1800 audit(1590431796.382:1339): pid=2805 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16284 res=0
18:36:39 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x152, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:39 executing program 3:

18:36:39 executing program 0:

18:36:39 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x0)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:39 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(0x0, 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:39 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:39 executing program 0:

18:36:39 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:39 executing program 3:

18:36:39 executing program 0:

18:36:39 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:39 executing program 0:

18:36:42 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x153, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:42 executing program 3:

18:36:42 executing program 0:

18:36:42 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:42 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(0x0, 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:42 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1582.869637][   T27] kauditd_printk_skb: 14 callbacks suppressed
[ 1582.869654][   T27] audit: type=1804 audit(1590431802.343:1354): pid=2835 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1172/bus" dev="sda1" ino=15975 res=1
18:36:42 executing program 0:

18:36:42 executing program 3:

18:36:42 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[ 1582.960981][   T27] audit: type=1804 audit(1590431802.383:1355): pid=2837 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/876/bus" dev="sda1" ino=16323 res=1
[ 1582.989378][   T27] audit: type=1800 audit(1590431802.383:1356): pid=2837 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16323 res=0
18:36:42 executing program 0:

[ 1583.042496][   T27] audit: type=1800 audit(1590431802.383:1357): pid=2835 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15975 res=0
18:36:42 executing program 3:

18:36:42 executing program 0:

[ 1583.078859][   T27] audit: type=1804 audit(1590431802.383:1358): pid=2837 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/876/bus" dev="sda1" ino=16323 res=1
[ 1583.163244][   T27] audit: type=1804 audit(1590431802.383:1360): pid=2836 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/886/bus" dev="sda1" ino=16326 res=1
[ 1583.202155][   T27] audit: type=1800 audit(1590431802.383:1361): pid=2836 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16326 res=0
[ 1583.221487][   T27] audit: type=1800 audit(1590431802.383:1359): pid=2837 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16323 res=0
[ 1583.241021][   T27] audit: type=1804 audit(1590431802.633:1362): pid=2846 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/887/bus" dev="sda1" ino=15919 res=1
[ 1583.265346][   T27] audit: type=1800 audit(1590431802.633:1363): pid=2846 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=15919 res=0
18:36:45 executing program 3:

18:36:45 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:45 executing program 0:

18:36:45 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x153, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:45 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(0x0, 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:45 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:45 executing program 0:

18:36:45 executing program 3:

18:36:45 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:45 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:45 executing program 3:

18:36:45 executing program 0:

18:36:45 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(0x0, 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:45 executing program 3:

18:36:48 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x153, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:48 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:48 executing program 0:

18:36:48 executing program 3:

18:36:48 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(0x0, 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:48 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(0x0, 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:48 executing program 3:

18:36:48 executing program 0:

[ 1589.049098][   T27] kauditd_printk_skb: 16 callbacks suppressed
[ 1589.049120][   T27] audit: type=1804 audit(1590431808.523:1380): pid=2877 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/879/bus" dev="sda1" ino=16320 res=1
18:36:48 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(0x0, 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:48 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:48 executing program 0:

[ 1589.175583][   T27] audit: type=1804 audit(1590431808.533:1381): pid=2878 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1174/bus" dev="sda1" ino=16314 res=1
18:36:48 executing program 3:

[ 1589.255517][   T27] audit: type=1804 audit(1590431808.533:1382): pid=2878 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1174/bus" dev="sda1" ino=16314 res=1
[ 1589.340791][   T27] audit: type=1800 audit(1590431808.553:1383): pid=2877 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16320 res=0
[ 1589.372604][   T27] audit: type=1804 audit(1590431808.563:1384): pid=2877 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/879/bus" dev="sda1" ino=16320 res=1
[ 1589.400323][   T27] audit: type=1804 audit(1590431808.563:1385): pid=2877 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/879/bus" dev="sda1" ino=16320 res=1
[ 1589.424377][   T27] audit: type=1800 audit(1590431808.563:1386): pid=2877 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16320 res=0
[ 1589.443278][   T27] audit: type=1804 audit(1590431808.773:1387): pid=2888 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/880/bus" dev="sda1" ino=16368 res=1
[ 1589.466504][   T27] audit: type=1800 audit(1590431808.773:1388): pid=2888 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16368 res=0
[ 1589.485469][   T27] audit: type=1804 audit(1590431808.783:1389): pid=2888 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/880/bus" dev="sda1" ino=16368 res=1
18:36:51 executing program 0:

18:36:51 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:51 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:51 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:51 executing program 3:

18:36:51 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(0x0, 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:51 executing program 0:

18:36:51 executing program 3:

18:36:51 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:51 executing program 0:

18:36:51 executing program 3:

18:36:51 executing program 0:

18:36:51 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:52 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:54 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:54 executing program 3:

18:36:54 executing program 0:

18:36:54 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:54 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:54 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

18:36:54 executing program 0:

[ 1595.213144][   T27] kauditd_printk_skb: 21 callbacks suppressed
[ 1595.213165][   T27] audit: type=1804 audit(1590431814.694:1411): pid=2917 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1176/bus" dev="sda1" ino=16039 res=1
18:36:54 executing program 3:

18:36:54 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1595.258076][   T27] audit: type=1804 audit(1590431814.694:1412): pid=2917 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1176/bus" dev="sda1" ino=16039 res=1
[ 1595.331943][   T27] audit: type=1804 audit(1590431814.694:1413): pid=2917 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1176/bus" dev="sda1" ino=16039 res=1
18:36:54 executing program 0:

18:36:54 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:54 executing program 3:

[ 1595.424707][   T27] audit: type=1804 audit(1590431814.794:1414): pid=2918 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/884/bus" dev="sda1" ino=15990 res=1
[ 1595.510497][   T27] audit: type=1800 audit(1590431814.794:1415): pid=2918 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15990 res=0
[ 1595.581098][   T27] audit: type=1804 audit(1590431814.794:1416): pid=2918 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/884/bus" dev="sda1" ino=15990 res=1
[ 1595.613677][   T27] audit: type=1804 audit(1590431814.794:1417): pid=2919 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/895/bus" dev="sda1" ino=15998 res=1
[ 1595.638050][   T27] audit: type=1804 audit(1590431814.794:1418): pid=2918 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/884/bus" dev="sda1" ino=15990 res=1
[ 1595.662791][   T27] audit: type=1800 audit(1590431814.794:1419): pid=2918 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15990 res=0
[ 1595.682678][   T27] audit: type=1804 audit(1590431814.844:1420): pid=2926 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1177/bus" dev="sda1" ino=16363 res=1
18:36:57 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:36:57 executing program 0:

18:36:57 executing program 3:

18:36:57 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:57 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:57 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)

18:36:57 executing program 3:

18:36:57 executing program 0:

18:36:57 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:36:57 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)

18:36:57 executing program 0:

18:36:57 executing program 3:

18:37:00 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:37:00 executing program 0:

18:37:00 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)

18:37:00 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x0)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:00 executing program 3:

18:37:00 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:00 executing program 3:

[ 1601.405199][   T27] kauditd_printk_skb: 20 callbacks suppressed
[ 1601.405220][   T27] audit: type=1804 audit(1590431820.884:1441): pid=2955 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/886/bus" dev="sda1" ino=15955 res=1
18:37:00 executing program 0:

18:37:00 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

18:37:01 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1601.508260][   T27] audit: type=1800 audit(1590431820.914:1442): pid=2955 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15955 res=0
18:37:01 executing program 3:

[ 1601.567877][   T27] audit: type=1804 audit(1590431820.914:1443): pid=2955 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/886/bus" dev="sda1" ino=15955 res=1
18:37:01 executing program 0:

[ 1601.616239][   T27] audit: type=1804 audit(1590431820.924:1444): pid=2956 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1181/bus" dev="sda1" ino=16052 res=1
[ 1601.646758][   T27] audit: type=1804 audit(1590431820.924:1445): pid=2955 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/886/bus" dev="sda1" ino=15955 res=1
[ 1601.745792][   T27] audit: type=1800 audit(1590431820.924:1446): pid=2955 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15955 res=0
[ 1601.792305][   T27] audit: type=1804 audit(1590431820.924:1447): pid=2956 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1181/bus" dev="sda1" ino=16052 res=1
[ 1601.850665][   T27] audit: type=1804 audit(1590431820.934:1448): pid=2956 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1181/bus" dev="sda1" ino=16052 res=1
[ 1601.900637][   T27] audit: type=1804 audit(1590431820.934:1449): pid=2957 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/898/bus" dev="sda1" ino=16065 res=1
[ 1601.951226][   T27] audit: type=1800 audit(1590431820.934:1450): pid=2957 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16065 res=0
18:37:03 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:37:03 executing program 3:

18:37:03 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

18:37:03 executing program 0:

18:37:03 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:03 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:04 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x8000fffffffe)

18:37:04 executing program 3:

18:37:04 executing program 0:

18:37:04 executing program 3:

18:37:04 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x0)

18:37:04 executing program 0:

18:37:07 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:37:07 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x0)

18:37:07 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/consoles\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x107482)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0)
write(r1, &(0x7f0000000000), 0x52698b21)

18:37:07 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c6500000001000000000000000000000000000000000000000000001f0000000600000010040000e002000038020000800100003802000038020000780300007803000078030000780300007803000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000e70000000000000000000000000000000000c000e80000000000000000000000010000000000000000002800727066696c74657200000000000000000000000000000000000000000000000100d20000000028007365740000000000000000000000000000000000000000000000000000010000000000000000280054544c00e4ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080f2ffffffffffffff000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000feffffff000000000100007000980000000000000000000000000000000000000000002800445343500000000000000000000000000000000000ae5147489b0800000000000000000000abe0000002ec1414aa00000000000000000000000000000000160000000000000065727370616e30000000000000000002000e00000000000000000000003300000000000000040000000000000000000000000000040000007000b80000000000000000000000000000000000000000004800544545000000000000000000000006f4bc8100000000d0001f0700000001ff020000000000000000000000000001677265300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000100000000000000000000000007000a80000800000000000000000000000000000000000003800534554000000000000000000ff000000000000010000000000000000000300000400000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007449ffffffffffff00000000000000000000000000000000000000000000000000000000f200000000000400700098000000000000000000000000000000000000000000280054544c000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000c00000000000000000000000000000000000000280000000004000700008000000000000000000000000000ffffffe400560000feffffff"], 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x1c)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

18:37:07 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:07 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(0xffffffffffffffff, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1607.579540][ T2996] x_tables: duplicate underflow at hook 1
[ 1607.582690][   T27] kauditd_printk_skb: 19 callbacks suppressed
[ 1607.582710][   T27] audit: type=1804 audit(1590431827.064:1470): pid=2995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1184/bus" dev="sda1" ino=16314 res=1
18:37:07 executing program 3:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8d}]}}}]}, 0x44}}, 0x0)

18:37:07 executing program 5:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x1000)
lseek(r2, 0x0, 0x2)
r3 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r2, r3, 0x0, 0x0)

[ 1607.727819][   T27] audit: type=1804 audit(1590431827.074:1471): pid=2997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir816639938/syzkaller.rvEppP/903/bus" dev="sda1" ino=16265 res=1
[ 1607.792959][   T27] audit: type=1800 audit(1590431827.074:1472): pid=2997 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16265 res=0
[ 1607.859387][   T27] audit: type=1804 audit(1590431827.094:1473): pid=2994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/888/bus" dev="sda1" ino=16293 res=1
[ 1607.894436][ T3008] x_tables: duplicate underflow at hook 1
18:37:07 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @multicast2, @random="12d3a7862637", @dev}}}}, 0x0)

[ 1607.967087][   T27] audit: type=1804 audit(1590431827.104:1475): pid=2995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1184/bus" dev="sda1" ino=16314 res=1
18:37:07 executing program 0:
clock_nanosleep(0xb, 0x0, &(0x7f0000000100), 0x0)

[ 1608.012277][   T27] audit: type=1800 audit(1590431827.094:1474): pid=2994 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16293 res=0
18:37:07 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0x0, 0x0)

[ 1608.077208][   T27] audit: type=1804 audit(1590431827.104:1476): pid=2994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/888/bus" dev="sda1" ino=16293 res=1
18:37:07 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1608.164384][   T27] audit: type=1804 audit(1590431827.104:1477): pid=2995 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1184/bus" dev="sda1" ino=16314 res=1
[ 1608.204659][   T27] audit: type=1804 audit(1590431827.114:1478): pid=2994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/888/bus" dev="sda1" ino=16293 res=1
[ 1608.233167][   T27] audit: type=1800 audit(1590431827.114:1479): pid=2994 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16293 res=0
18:37:10 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x0)

18:37:10 executing program 0:
syz_emit_ethernet(0x7a, &(0x7f0000000680)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fcc026", 0x44, 0x2f, 0x0, @empty, @ipv4={[], [], @dev}}}}}, 0x0)

18:37:10 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:10 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x2, 0x0, 0x0)

18:37:10 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(0x0, 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:10 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:10 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:10 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x4000ae172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil)
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff7000/0x3000)=nil)
shmat(0x0, &(0x7f0000000000/0x10000)=nil, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0)

18:37:10 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00')
preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000000)=""/54, 0x36}], 0x1, 0x7ffffe)

18:37:10 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

18:37:10 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:10 executing program 5:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0)
semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x2}, {}], 0x2, &(0x7f00000000c0))

18:37:13 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="11dd49b9740c9e57f43d26a78222a4f98a58480aa4cefd3b79e77d0076cc03592a160500000032a56f7259e480249950f34c82a1cef20d94c30e478947d190ab9493646d6c0b004d807ef3914ad69ad6f03f76a9934f69d06e07d3d82ce0db72a147aed99f6c57597080fe26fa9fcc1fe364a951fc9d4924ccde5d7841310a81aa0839b0c9e7b6e791584f831df7af25a1e151762b0b83bc52d046bff9c3ad04a4a86d542aa018ed36a10a3e698ce29bcd51e72314a3835c987435da9d768880f9f3de41fb67be57df956b376ecd3cdbfdd18868b463159cebb6df1b68cbad0cb702ffdbb113a6d21103f5eb53177d2736654ed6b62317979fdac98c1204cdef0e44d9397d4c2a7380e4b33ed726eb48496aa556954d61dfd77e9e7eb514898739e30096d210530a0d788a13a3fc8cd9db73a18a6db90f6b385292f6f75492c49137e74729ac6b554fc4452574efc9fa8530c9a5"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x0)

18:37:13 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:13 executing program 5:
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x14, 0x6, 0x0, @private2, @mcast2={0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x3, 0x5}}}}}}}, 0x0)

18:37:13 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000009000000030000005002000000000000e0000000e0000000e0000000e0000000b8010000b8010000b8010000b8010000b80100000300000000000000005a0000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000009800e00000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000080000000000000048004354000000000000000000000000000000000000000000000000000000000100000000000000000000006e657462696f732d6e73000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a000000000000ff000000000000000000000000000200000000000000000000000000000000000000000000007000d8000000000000000000000000006d560000000000006800435400000000000000000000000000000000000000000000000000000002010000000000000000000000736e6d7000000000000000000000000073797a30020000000000000000000000000000000000001e00000000000000e51f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000d000000000000000d02a00000000feffffff"], 0x1)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @dev}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0)

18:37:13 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(0x0, 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:13 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:13 executing program 5:
clone(0x2100001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x3e9, 0x0, 0x0, 0x0, {0xe7}}, 0x34}}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
tkill(r0, 0x33)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

18:37:13 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1613.742026][ T3058] x_tables: duplicate underflow at hook 3
[ 1613.749610][   T27] kauditd_printk_skb: 8 callbacks suppressed
[ 1613.749647][   T27] audit: type=1804 audit(1590431833.215:1488): pid=3059 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/890/bus" dev="sda1" ino=16382 res=1
[ 1613.767562][ T3058] x_tables: duplicate underflow at hook 3
18:37:13 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x1c1082, 0x10)

[ 1613.865461][   T27] audit: type=1800 audit(1590431833.265:1489): pid=3059 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16382 res=0
18:37:13 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:13 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

[ 1613.911383][   T27] audit: type=1804 audit(1590431833.265:1490): pid=3059 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/890/bus" dev="sda1" ino=16382 res=1
[ 1613.970345][   T27] audit: type=1804 audit(1590431833.265:1491): pid=3061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1186/bus" dev="sda1" ino=16326 res=1
18:37:13 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

[ 1614.044262][   T27] audit: type=1804 audit(1590431833.275:1492): pid=3061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1186/bus" dev="sda1" ino=16326 res=1
[ 1614.104739][   T27] audit: type=1804 audit(1590431833.275:1493): pid=3061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1186/bus" dev="sda1" ino=16326 res=1
18:37:16 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:37:16 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, 0x0)
ptrace$cont(0x7, r0, 0x0, 0x0)

18:37:16 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:16 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(0x0, 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:16 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x0)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:16 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mknod(&(0x7f0000000000)='./file0\x00', 0x1120, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
creat(0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x1c1082, 0x10)

[ 1616.821144][   T27] audit: type=1804 audit(1590431836.295:1494): pid=3086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1187/bus" dev="sda1" ino=16293 res=1
18:37:16 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:16 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @random="4ea35c9f13fc", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

[ 1616.903429][   T27] audit: type=1804 audit(1590431836.325:1495): pid=3086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1187/bus" dev="sda1" ino=16293 res=1
18:37:16 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @mss, @mss], 0x20000000000000ec)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r1, &(0x7f0000000240)='\b', 0x1, 0x4004001, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0xf7ff, 0x2, @private0}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setreuid(0x0, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x60}}, 0x4008000)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x4002000000000028, 0x0, 0xfffffffffffffd25)

[ 1617.019445][   T27] audit: type=1804 audit(1590431836.325:1496): pid=3086 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1187/bus" dev="sda1" ino=16293 res=1
18:37:16 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0)

18:37:16 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1617.090944][   T27] audit: type=1804 audit(1590431836.335:1497): pid=3090 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/891/bus" dev="sda1" ino=16281 res=1
18:37:16 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:19 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

18:37:19 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x801, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

18:37:19 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:19 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(0x0, 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:19 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:19 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @mss, @mss], 0x20000000000000ec)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r1, &(0x7f0000000240)='\b', 0x1, 0x4004001, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0xf7ff, 0x2, @private0}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setreuid(0x0, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x60}}, 0x4008000)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x4002000000000028, 0x0, 0xfffffffffffffd25)

18:37:19 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000400)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @mss, @mss], 0x20000000000000ec)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r1, &(0x7f0000000240)='\b', 0x1, 0x4004001, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0xf7ff, 0x2, @private0}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setreuid(0x0, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x60}}, 0x4008000)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x4002000000000028, 0x0, 0xfffffffffffffd25)

18:37:19 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1619.954843][   T27] kauditd_printk_skb: 2 callbacks suppressed
[ 1619.954862][   T27] audit: type=1804 audit(1590431839.425:1500): pid=3123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/892/bus" dev="sda1" ino=16368 res=1
18:37:19 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1620.059529][   T27] audit: type=1804 audit(1590431839.435:1501): pid=3124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1188/bus" dev="sda1" ino=16362 res=1
18:37:19 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1620.149768][   T27] audit: type=1804 audit(1590431839.435:1502): pid=3124 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1188/bus" dev="sda1" ino=16362 res=1
18:37:19 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1620.207980][   T27] audit: type=1800 audit(1590431839.465:1503): pid=3123 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16368 res=0
18:37:19 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1620.276671][   T27] audit: type=1804 audit(1590431839.465:1504): pid=3123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/892/bus" dev="sda1" ino=16368 res=1
[ 1620.355588][   T27] audit: type=1804 audit(1590431839.475:1505): pid=3123 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/892/bus" dev="sda1" ino=16368 res=1
18:37:22 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:22 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

18:37:22 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:22 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(0x0, 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:22 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x1001, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0xf48, 0x4)
sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

18:37:22 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)

[ 1623.006452][   T27] audit: type=1804 audit(1590431842.475:1506): pid=3149 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1189/bus" dev="sda1" ino=16152 res=1
[ 1623.063457][   T27] audit: type=1804 audit(1590431842.505:1507): pid=3149 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1189/bus" dev="sda1" ino=16152 res=1
18:37:22 executing program 3:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(0xffffffffffffffff, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1623.120422][   T27] audit: type=1804 audit(1590431842.505:1508): pid=3150 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/893/bus" dev="sda1" ino=16265 res=1
[ 1623.190087][   T27] audit: type=1800 audit(1590431842.515:1509): pid=3150 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16265 res=0
18:37:22 executing program 3:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(0xffffffffffffffff, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:22 executing program 3:
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(0xffffffffffffffff, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:22 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0)

18:37:22 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:23 executing program 5:
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffff9, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200002000157df, 0x187f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

[ 1623.693114][ T3174] NFS: Device name not specified
[ 1623.752852][ T3177] NFS: Device name not specified
18:37:23 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:25 executing program 0:
socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x4004000000000ba6)
splice(r0, 0x0, r2, 0x0, 0x8ec0, 0x0)
close(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0)
io_setup(0x6, &(0x7f0000000140))
ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000040))

18:37:25 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)

18:37:25 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:25 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@hopopts={{0x14}}, @hopopts_2292={{0x14}}], 0x28}, 0x0)

18:37:25 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(0x0, 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:25 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1626.076727][   T27] kauditd_printk_skb: 6 callbacks suppressed
[ 1626.076746][   T27] audit: type=1804 audit(1590431845.546:1516): pid=3187 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1190/bus" dev="sda1" ino=16168 res=1
18:37:25 executing program 5:
r0 = epoll_create1(0x0)
r1 = socket(0x11, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0xefee7ecc4077702f})
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)

[ 1626.141917][   T27] audit: type=1804 audit(1590431845.556:1517): pid=3187 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1190/bus" dev="sda1" ino=16168 res=1
[ 1626.168643][   T27] audit: type=1804 audit(1590431845.606:1518): pid=3193 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/895/bus" dev="sda1" ino=16314 res=1
18:37:25 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1626.235472][   T27] audit: type=1800 audit(1590431845.606:1519): pid=3193 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16314 res=0
[ 1626.262812][   T27] audit: type=1804 audit(1590431845.606:1520): pid=3193 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/895/bus" dev="sda1" ino=16314 res=1
[ 1626.289419][   T27] audit: type=1804 audit(1590431845.616:1521): pid=3193 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/895/bus" dev="sda1" ino=16314 res=1
[ 1626.317356][   T27] audit: type=1800 audit(1590431845.616:1522): pid=3193 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16314 res=0
18:37:25 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:25 executing program 5:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

18:37:26 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:26 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:26 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r0, &(0x7f0000001980)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x8, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @ndisc_rs}}}}, 0x3a)

18:37:28 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

18:37:28 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:28 executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732})
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}})
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xd0, 0xd0, 0xd0, 0x0, 0xd0, 0x2c0, 0x2e0, 0x2e0, 0x2e0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @empty}}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'wg1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'bridge_slave_1\x00', 'ipvlan0\x00', {}, {}, 0x11}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60163dac01002b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x3a)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r2, 0x0, 0x18100, 0x0)

18:37:28 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:28 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:28 executing program 5:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

[ 1629.220285][   T27] audit: type=1804 audit(1590431848.696:1523): pid=3229 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1191/bus" dev="sda1" ino=16314 res=1
18:37:28 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1629.287556][ T3230] x_tables: duplicate underflow at hook 2
[ 1629.292618][   T27] audit: type=1804 audit(1590431848.716:1524): pid=3233 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/896/bus" dev="sda1" ino=16293 res=1
[ 1629.367833][   T27] audit: type=1800 audit(1590431848.716:1525): pid=3233 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16293 res=0
18:37:28 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:29 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:29 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:29 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:29 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:31 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="6d616e676c65000000010000000000000000000000000000f3000000000000001f0000000600000010040000e002000038020000800100003802000038020000780300007803000078030000780300007803000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000400000000c000e80000000000000000000000010000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028007365740000000000000000000000000000000000000000000000000000010000000000000000280054544c00e4ffffff000000000000000055000000000000000000000000000000000000000000000000000000000000000000000000000000000080f2ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000070009800000000000001000000000000000000000000000028004453435000eeffffff000004000000000000000000ae51474821ccc6cd000000000000000000e0000002ec1414aa00000000000000000000000000000000000000000000000065727370616e30000000000000000002000e00000000000000000000003300000000000000000000000000000000040000000000040000007000b8000000000000ffe7000000000000000000000000004800544545000000000000000000000006f4bc8100000000d0001f0700000001fff800000000000000000000000000016772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000f8000000000000000000000000000000000000100000000000000000000000007000a800000000aa000000000000000000000000000000003800534554000000000000000000ff0000000000000100000000000000000003000004070000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe8000000000000000000000f00000000000000000000000000000000000000000000000000000000f200000000000400700098000000000000000000000000000000000000000000280054544c000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000004000700408000000000000000000000000000ffffffe400200000feffffff"], 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

18:37:31 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

18:37:31 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:31 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:31 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x0, 0x160, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'vlan0\x00', 'sit0\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0, 'conntrack\x00'}, {{@ipv4, [], @ipv4=@empty, [], @ipv4=@empty}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}, 0x0)

18:37:31 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

[ 1632.304333][ T3259] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[ 1632.315564][ T3260] x_tables: duplicate underflow at hook 1
[ 1632.324103][   T27] kauditd_printk_skb: 5 callbacks suppressed
[ 1632.324125][   T27] audit: type=1804 audit(1590431851.796:1531): pid=3261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1192/bus" dev="sda1" ino=16188 res=1
[ 1632.332459][ T3259] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
18:37:31 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1632.435569][   T27] audit: type=1804 audit(1590431851.796:1532): pid=3261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1192/bus" dev="sda1" ino=16188 res=1
18:37:32 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x3d)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x100000, 0x0)

[ 1632.533542][ T3260] x_tables: duplicate underflow at hook 1
[ 1632.540931][   T27] audit: type=1804 audit(1590431851.796:1533): pid=3261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1192/bus" dev="sda1" ino=16188 res=1
18:37:32 executing program 5:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="c400000004060101000000000000007e0000000005000100060000009c0007801800018050000240fe8000000000ffff0000000000005015d41b0000000000000c00000000000054fedcbcca9c55170076650800"/93], 0x1}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x8000, 0x0)

18:37:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1632.621614][   T27] audit: type=1804 audit(1590431851.836:1534): pid=3262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/897/bus" dev="sda1" ino=16265 res=1
[ 1632.716594][   T27] audit: type=1800 audit(1590431851.836:1535): pid=3262 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16265 res=0
18:37:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1632.753478][   T27] audit: type=1804 audit(1590431851.836:1536): pid=3262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/897/bus" dev="sda1" ino=16265 res=1
[ 1632.788132][   T27] audit: type=1804 audit(1590431851.846:1537): pid=3262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/897/bus" dev="sda1" ino=16265 res=1
18:37:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1632.816960][   T27] audit: type=1800 audit(1590431851.846:1538): pid=3262 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16265 res=0
[ 1632.824686][ T3281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
18:37:32 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:34 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x40)
write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x154, &(0x7f00000193c0)="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"}}], 0x1c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, 0x0, 0x0, 0x0)

18:37:34 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:34 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:34 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

18:37:34 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="39000000140081ae101b43727002215a28e76b1afb003c000500018311001f9f660fcf065b85acb612f691f3bd3508abca1be6eeb89c44ebb3", 0x39}], 0x1}, 0x0)

18:37:34 executing program 5:
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="39000000140081ae101b43727002215a28e76b1afb003c000500018311001f9f660fcf065b85acb612f691f3bd3508abca1be6eeb89c44ebb3", 0x39}], 0x1}, 0x0)

18:37:34 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

[ 1635.451948][   T27] audit: type=1804 audit(1590431854.926:1539): pid=3295 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/898/bus" dev="sda1" ino=16019 res=1
18:37:35 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1635.555523][   T27] audit: type=1800 audit(1590431854.926:1540): pid=3295 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16019 res=0
18:37:35 executing program 5:
r0 = getpid()
getpid()
perf_event_open(&(0x7f0000000880)={0x2, 0x70, 0x0, 0x7, 0x20, 0x7, 0x0, 0x6b0, 0x0, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe5, 0x0, @perf_bp={&(0x7f0000000400), 0x9}, 0x9ba0, 0x0, 0x800002c, 0x5, 0x0, 0x10401, 0x7f}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080))
perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x24b4}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000500)={0x3, 0x70, 0x5, 0x6, 0x7e, 0x2, 0x0, 0xea, 0x63245, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000380), 0xf}, 0x80, 0x7, 0x0, 0x1, 0x10000, 0x4, 0x11}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x113000, 0x0)
perf_event_open(0x0, 0x0, 0x4000000020000007, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b25db4cb904e473730e55cff26d1b0e001d00140000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0xce24, @local}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000580)="d971cad8dfbd19328ce42cb1753ccaee3acdb573f1a3c7b6c30944ad8c379ef87b42d553d8f9567e452ba79902fbcd2b2ae6357973ae1352cacf2df77a2c6952101dd9c424642a95bb39431359b72abacecfed32a4018f3c91620a7910fae32cf6b6822502f1239c6bfb2b5abf12710869367f9799177fa5a5136039c757e60d775548172c2340e1cd0a69626673066818e8fb934730fbdeab2e04fd3fb3699f9fbac8d64155159807301341f3ae8bd3d929be5ee4d73220cb4659fed854040b07b59f894eabee9b2c1e91f52a730c48c2c5f8eac8cd1e61cb3dd518789f5090", 0xe0}, {&(0x7f0000000680)="3c02a19e647751c6b757f321bc26df3fb7762c8add6be3d8e33db2c9bd7d34bb93a3f397b8b5f8f045f0c4ef4e790a591e34bb27c335f2ec22eff97f608a41f5d61bcc3e3e28e48e2287a3f385a22b4496002f3aa8558305f35084b1e09176ced41d7a37ec14b24e", 0x68}, {&(0x7f0000000700)="39046ed860e54510404643bda0fb00011eea9247b30db611f154ef6a1110a01f2a170bfe9d4eb9de693d3f94f2578e1e00cc71bc75b9c69f64c5eabc8fcafc971f7210f41ccf2d60fb2c2fb6f7611ed9f09f490340eb06b922af239eab640eeb69e646f7533e9852788c54707973a7d7ee72ffb558f97761d4a11a6ef36f9bb17b64b1", 0x83}, {&(0x7f00000007c0)="81523bb61a5a0943291d752482f580adbc10eafcc5ae29e56f958a90ef071a4d85f41a11344a54679dd91e096025f895e4af8a47fded40a96fbf891297e5ae096319ff837c76104040136be6657e1d5f8eb61c78d6061fee66560ea144f785f83ed26dfd281d8fe0751da0751e1bb905adc9f2570322ee6fa720e3b5ff1eb04b2231a69a0400b19cec213233e5010000002663127538b040a25e42cc2a706f1537cbef58b748baa4b17dc8b45d33189e48", 0xb1}, {&(0x7f0000001900)="68e62df5535b492bb3a736e868d9f22e9517b30af666e92f8fe9b8413457f5b76673c951184994be6f3736e5ed95f6b3112d17bb5ff117609cc81c552fbbeee48880cb398618df58a87f4df210f60679b57aa8bbc682bff2b9f96ebbd4c23409c084bd6fb6308502e5c04270156a7435bff4055a01ef94bacbfc2195bcb27226397466eb4370826470bb4b2581a2e05558f1e3865e672506391bff5eeb2faf9804f77447d39afedf3dcef0e8bb85b8dade1910fe978e62daad905a9282148118c6e4d311f9ce85193642d9659c31fe4f99d801eefeecef23cec093548f84d9e82bd65542320a75dd1ccf57e4fcc92178bf17925f0fb72b7a99ad1ed570f0bcf099eb55a0413cc5bad09e7752a682b8b2326dd97e7a053bdba1827b53629fc606e0e364e38d2f6a5707efcffd51749d3974066eca52373427062245ecf6deeae51e223db8db8909235e3a16d63399f92d787bd8595787e551151d38139275bbf1354444a552e5f4cfe7d6c99c1bd0ee64bfb8e5dc49a7d0cf0526ac482a371a97d36b5913466bd5dab11f3ab9e7353fc796b3e70dc232e2821ac9b5c2865543fbc44c607f38d9cbd65ec8cc81b027e5caf20d3a9d65bd97c48e67b45f7e4616a7e1f86795f2b2a0972401f7f76ca11ee23dbf7ab7c08316830676eb48252544963447e16508fe6f6b9ade00d468fb6a3f664936e4f94f824be33bbebd3b0a6a656f440fd0317cb45497298e94f21165da0c52f103693493c8dcbf0d1e738938b8d0e2b9fbaf219f40db521e687595d2ac1733517f0af141e090b830715c9340c8a9e41ca695418fec6fc0c6f769bf93471936c185f8f32e6305b1b15fe690486114a6702bb4a1b299f84b06a0ed84a35109e94f3b0b3c1583b99f17fdf3118755d78909fe25de663f073b0b99de21eb2bc4eb26b9045ecb72a3ce756a75d619c74762ec6e26a18a8b0167bcc6b88dcff8756c082701f8cc85d0cd83a143e430a64eaf7df1ceebbf7d85d1d8c9caf37cd59ce6536884876c6c934596b4aadec75857a3aabe2743e7873f519c6cea067b9d8718ce40cc2d05a987993dec0318936e36da90097ef82fc01ad4247a43f3e5497f7f43a75f945761e5f1bb10a9742a2cbedf64ead2ef4dc90ab625aa5071d9d191d2d1b8e79e456e006fa7aeec4f7dfe826d7584897fce5eafe79c2c3b7e0c00e03b442b5dc0bb299a8d9637e726b02c336fd702c2bdaeff027c0457e19f427acfee24eb30ef7c541b749f693fb48b84356eccdd6b75941d73889c6872914afc5b45535b355a056c614c280278c807094e02a302420d822aacbaa4a8036e04924220bb44f60cf2a0a83a7b4e3b747e053db9125b0df6c7b35c996a9f713248f05e348cc7989ebac5a331190301e48a4f41f6fa99d35a611e8bceff7ee9e9a55e0b3fb16cf00ac50151f41322c22e013feae898061998036471531bed14e9e2867c7078f5c616bcbd27ce33a3c0599bc741e6153559ff2b7c62dde928b1c75767ec3897256ee8725440f6fe4bd095070d187338dab7570adf4d014410a9568ee447b8516fd30bcbb29a6ea5d837a6e47b45ef0c76a811155252282289494d01bc7f2472403655858bbf109b77e11958135d89ead30cd03058a63adc14ff1260a2b886edd7cead5624d5a3faf9fcb359f4e178ebe99cc546742d284392c20b0f203f0f889cf5717187db5d198b394bd01838b34b70e5a8a5ebebaeda68d3dfc588ee8cf51d972379815373975db1f987207a6733b1a5ffddc100afcbf724ec104f3b67affef79fcc05ec0038745503b0edc0f8add70d7b95c7690dbacbaf912676acf2109afee61ed332f5f55ed2448f3136f96246e18693418e0098fe963c2f37ae944f9abcc66bbfc2f9919306791faf0b96f6bf68566fb1a5dd63e9514b328f26e7b30407bc0191788aed48283dc5c5bfd8c1d06702cce686bee8e8cb1cef63fb88976b0a0072fa440d39ccfe737abf9ce40f442f841f9041e4baece9baeae9e62f42d272513f30c84ee8c8637c10e20f2e0a76579d0b060c72d0357708b3392f25a449aa58eee002c35f2bb87238429016124a59a4707303dfb5fa2a7cc6a0075d9e7c6062fcc15f8b171a1d5e64faf6bb6960932c40ed0af0dc0aeffbf5e365cec2680cab6c3e0e28b243bf2bf55e52df6af20c79c978bf91a93ce25996f30d7c3ca3e4001b3d01e45cf6402e966430be4d1d90c6997a6d9c9466901b35ee66c2c0fbe49b4b3673a80399e3218c702ea82e23f41ee4f78ec1787a7dacd72beebc02e7c92e58c1a6b9ff2517538b1d77beedcc9d0b2173e5947801310bc3413638ce88e624c0f4b4ba62a94166e3314a11bef16a367cd5d72e36eb9356db66f833097e2ca2d8608740308a81f1c8035c1e09fa2a7d308c310c5e921ff261589b619dde822250a574b14a07dc5b84f8293c9b4d5abfaa4009254ca979b92fb867025749a0df2f2f839f5796148390242af130aa4d90bba3fb3c9f172c7d011c81e392380de950169004e9d8bd49f0d65b51b75f2d531f996652ba744fcf4c356eda7b5f637d00a5d6d81ce388b372cea659ec214c8aeb07ecdc4d2fd506b685f126dbe5400947eced05f94560183baf55997466fac25d4be63e9f2786f370c8d7dea725c2c024d0f8c735cd7e2e9997239b9410635ef5c1ce6185afb73eca370f8858ebb2bbdf5368daf24a46c13cfa3b987faf0e79664ff44db8f9e5709e92c69aac7ab7d6f63fce69c13c64b305e6fdeff371d49c547e3deb2981d6b480eeea0f2310b72b0fa9171f5587d0e4b721305d3104e04e09d6645c991623cbbf8080c1a7a64dcdb9ef4e42f14a1df479cb9c774787cdbf7070143e8b4050ff6c76536cc3a3fc8cc083f1e40503943d60104a8c5ae9d619ef5c89603a60e171831ffc009a61b71b34225cc67d73e68712dc4c8125d404d4f104858cd3475f4e53792c44d54c84494b4b9204f76a8d3900ac405a866f1181f652dcca0fe84155fba17d1802801166016c7498815f537c52c3a742d0b39f8b39e362a20418261421a714603f79117f9cf7a52b57c5de4da2fbf65ca5e8b24c354ceffd4183667cafa2bcfb93644a59b0d9f7f7e69c1a72e0cc3af4bda0999bce840046e33fe93bdef3a3ffd7bca02c5efb373d1041d561d1f8acd8dcc01cd89ef43d902186939325ed59fee51729a143bd91c606da7c07fc09913eb212dccaa2911d842d85a1f85a72ffa5f57429a61ff7b045c80d311902c8955c66ed212c19f290507724f6f595fb72e76add0c27be640ed46816bc6569ac5c984df520625c3d47a970f72c154079dfa3cac5b4330474a4dc22e7caef727d6a5def22dd3fec4788321b24e78e568290d293945862988756c6a2cc31312c57f234782fd3310068be2f0cd02ea0b1c19d22a23330a03110bb7f858ccb98e3c70100818b03fc8689d4f25a2dcb94d39321d242e6f2fa392351e942a19ba22b053c30628d26a8a59617971f6d8f8b3ab8aae11a7f61bd6cc64c3614626d82d3028e38103a1b95ee2d5cbcedc87f9f99e18005c48f7bfb2b06cf30db6847cf8d6086d8adf4908ff0370a49bfec4a1a99c2a33db969e9d30971fadfc19238a6df5762f217ca107e245de3dac69ec2b207edd8b96d1d1930d63011e5d84708ae17c558a3ec4b2c16fd22c1a7ea8be17be5ea6e033e9ac2da52aa8039f48deba6e1dcf0262a988424a418b32f1d73e63766c6ea2e00ebaf9dc3de2b8d35af61479fa00feabc6aad48bf21e89126843db45129578d96304b08535d2e3ca3f258417cfd42c3f7a60721a4b69c8ec6e4db1f120f0cd64d06d54e48198ecb5ce867cc4113eea8415368e94c16ed60d284f79643a91e3eb173f427141a2e99f673e9e14ee2fa7b94b90b9ba1ce68504f3a768f2ae762ceb121b9b88d9358b481cb16219a8f3e26ee76dbb1481b0310b341e4f7724a5c193cf84e4168e72ff1e5da5e2be7d4b761de5305b7570ab8de1eaace1799835739afb7f66f795c9af31b9c0093aab4c6b47a8af6b72413c0336c6bdb2e9b71c43eba15ec6fd38ee9c7826693de85772920161b64656c6f2faebe95864619e082e69a533ea41c555e7c3d4f8ce900fc22501b2118c88f532fa3b12ca5f64212887ac7c9916caccdf650a7e3eaa761adc1a482b692a8459b069f33d00899ba5ba10c88acd90c964993bf7691d44e9c7c6cfcf92a45c195d04ba9ef4477bd4fd1e6823d9ab50071a3dc902d04b623ee36de966e85a4f48fd34a3b6a25139ba3ec049cafc55a3cac5c4deddc1bd359572be8e45ab51e40416186b3e24d5fe9b5bb61800de07015d49a0546b14ee310fcaf7abea763a1f3d7807e4e5f756599e392b6d1e04011717da441cc408c2da11a28bc6774cb4de59cd51887bc9b3b99742bb98a43f68522bef3439c9bb43b698f224971334ba4dda6ded8a8b3cd812da129b4e38affee6ed7664ff040f63b669d7bd39ab0abd26302ff2f241bff0194d7d8b5906e3451eef9a13908eabadabcbc9bb574c5f3df8f8f6e74e0dc895ed092cfb1ff3f4591e453c5d4fb2c1e76e975ab82cba40dd17e244a78b0335cc83a1486ab6de8a9c808a0c15e8159518b175e5ebca3ecebe27422593402146bb9084d45c374c7ba8df851be0fed2ec2668f99e5affc42b6e7fff248eb14d2b73ae668630235ea2f036759d02ce39b4919a0fca364a3d375cabc2bc1fbd7cba9e526b91aed2c329b8bb50e061a75c14857b47bdd0d4b8bebdbb240e6f49007b61b57897cf66e892e83da78f48a9a53d2bdd529b251a8011fa7ce3dc204f6dd80abaeb3eb3b866a818c0dc4d5d0be8312f86801588a93378fb746788f446e9a0e0ed5eaf5b58252a71a4bc09df34bc11b93ab489d8d2f1a64ec7602bad4a573c5e8762d80da708ab262b31e7835f6476f68e447bcf0c81aa4abfd5482749390b3648fc9f8911c1fe3b2eed382c6b6ffbf45c93737d7c68f0071585ccf640fadff48ce29e6d8836d7e578f4118aadce6ff131ab60eea462b5962d393585d42bd365b21eb3af138a81cc27e48860862a6a606d762d560fc6030f09938a57a1c2713076872e225a13d89763b5f075129db81cdd35d98b15cb2d6901b885841849ad5e4faa0807abc10e527870f8ed3d1acdb0f728372615023a76fc53cffa76ce7b2bb72918b325e8972347b684309b645c190a75d2eaae3ea0b75648e43242f34e8acdbfab7296ad3480034eaba5c85fac7b028fda65d2a4da08cb621d825b0e6fcb507d60228d125a086aa6a46567059af2e789877f20dbc2f8f0992f621e9c4c89d090dfc9f7ac808128263a372b489cc19020b9d9342c8f147b4ee03a7e1b500531ca1ecc745fbe0ef6bf996d74fca88bb046adf5a9e774c0de6fdb6f9866644cfa6ea670d298bbc3eb59868538a603420d1cc6d0596457a9ae7c8c1363bbe6fe11a5e0e4248a52839915a9627d36db22a66c72e85128c20fd9995940a6694948a1a19200c78163fcfe2da97466f4601647ddf507dbc73f8e51ad0fba3a689e7c178d686a74c80260fc99568e243b60153b716f52e06d4532e603d631ad45f2be74ac24b5adc7f75c0836aa8b8e6788b9d27b90702b556aefb411bdf4b633b161f3aa5f414e659d17a05aaab737882a4d2deba28aa29f1cd6ec46c6e3d34f0055ee263d4fe5c8e493c54df63b5a4fbbc309f61978fd6097f4f8b12a8110dc398a203f7c01fe5e9e23d0751e14f69fc48ac9cb92e1ce2aae857f226ce3b4b14b3fee985444fe551da002b5e33ad40f6ce281762dab993370cfbe43dc4c4e9ca5e8a2579f7686e6a8e7736fa0338185135d4d14917809560bfa681544c9fb2f390e3b03fb23f70f065a8af4028036638d27912623a37da03a6a22250b7d18826d936762da0d85d494c8fbe244d3682087c70c0476e0f850956be6ac59a3c976b904a8f8e678e8cf6562cfe44e274a80cb30f9149dcab2c53bb5c863ea834c4139a7d360bcfeeb1f73e4b89a3ac0645388ec896b70452", 0x10a1}], 0x5}, 0x4)
close(0xffffffffffffffff)
socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="2e00000011008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0)

18:37:35 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:35 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

[ 1635.742494][ T3310] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[ 1635.799029][ T3314] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[ 1635.920748][ T3310] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[ 1635.969941][ T3310] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[ 1635.980639][ T3310] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
18:37:37 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:37 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:37 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

18:37:38 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote})
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'hsr0\x00', @broadcast})

18:37:38 executing program 5:
r0 = getpid()
getpid()
perf_event_open(&(0x7f0000000880)={0x2, 0x70, 0x0, 0x7, 0x20, 0x7, 0x0, 0x6b0, 0x0, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xe5, 0x0, @perf_bp={&(0x7f0000000400), 0x9}, 0x9ba0, 0x0, 0x800002c, 0x5, 0x0, 0x10401, 0x7f}, 0x0, 0x5, 0xffffffffffffffff, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080))
perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x24b4}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0xa)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f0000000500)={0x3, 0x70, 0x5, 0x6, 0x7e, 0x2, 0x0, 0xea, 0x63245, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000380), 0xf}, 0x80, 0x7, 0x0, 0x1, 0x10000, 0x4, 0x11}, 0x0, 0xc, 0xffffffffffffffff, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x113000, 0x0)
perf_event_open(0x0, 0x0, 0x4000000020000007, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b25db4cb904e473730e55cff26d1b0e001d00140000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x2, 0xce24, @local}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000580)="d971cad8dfbd19328ce42cb1753ccaee3acdb573f1a3c7b6c30944ad8c379ef87b42d553d8f9567e452ba79902fbcd2b2ae6357973ae1352cacf2df77a2c6952101dd9c424642a95bb39431359b72abacecfed32a4018f3c91620a7910fae32cf6b6822502f1239c6bfb2b5abf12710869367f9799177fa5a5136039c757e60d775548172c2340e1cd0a69626673066818e8fb934730fbdeab2e04fd3fb3699f9fbac8d64155159807301341f3ae8bd3d929be5ee4d73220cb4659fed854040b07b59f894eabee9b2c1e91f52a730c48c2c5f8eac8cd1e61cb3dd518789f5090", 0xe0}, {&(0x7f0000000680)="3c02a19e647751c6b757f321bc26df3fb7762c8add6be3d8e33db2c9bd7d34bb93a3f397b8b5f8f045f0c4ef4e790a591e34bb27c335f2ec22eff97f608a41f5d61bcc3e3e28e48e2287a3f385a22b4496002f3aa8558305f35084b1e09176ced41d7a37ec14b24e", 0x68}, {&(0x7f0000000700)="39046ed860e54510404643bda0fb00011eea9247b30db611f154ef6a1110a01f2a170bfe9d4eb9de693d3f94f2578e1e00cc71bc75b9c69f64c5eabc8fcafc971f7210f41ccf2d60fb2c2fb6f7611ed9f09f490340eb06b922af239eab640eeb69e646f7533e9852788c54707973a7d7ee72ffb558f97761d4a11a6ef36f9bb17b64b1", 0x83}, {&(0x7f00000007c0)="81523bb61a5a0943291d752482f580adbc10eafcc5ae29e56f958a90ef071a4d85f41a11344a54679dd91e096025f895e4af8a47fded40a96fbf891297e5ae096319ff837c76104040136be6657e1d5f8eb61c78d6061fee66560ea144f785f83ed26dfd281d8fe0751da0751e1bb905adc9f2570322ee6fa720e3b5ff1eb04b2231a69a0400b19cec213233e5010000002663127538b040a25e42cc2a706f1537cbef58b748baa4b17dc8b45d33189e48", 0xb1}, {&(0x7f0000001900)="68e62df5535b492bb3a736e868d9f22e9517b30af666e92f8fe9b8413457f5b76673c951184994be6f3736e5ed95f6b3112d17bb5ff117609cc81c552fbbeee48880cb398618df58a87f4df210f60679b57aa8bbc682bff2b9f96ebbd4c23409c084bd6fb6308502e5c04270156a7435bff4055a01ef94bacbfc2195bcb27226397466eb4370826470bb4b2581a2e05558f1e3865e672506391bff5eeb2faf9804f77447d39afedf3dcef0e8bb85b8dade1910fe978e62daad905a9282148118c6e4d311f9ce85193642d9659c31fe4f99d801eefeecef23cec093548f84d9e82bd65542320a75dd1ccf57e4fcc92178bf17925f0fb72b7a99ad1ed570f0bcf099eb55a0413cc5bad09e7752a682b8b2326dd97e7a053bdba1827b53629fc606e0e364e38d2f6a5707efcffd51749d3974066eca52373427062245ecf6deeae51e223db8db8909235e3a16d63399f92d787bd8595787e551151d38139275bbf1354444a552e5f4cfe7d6c99c1bd0ee64bfb8e5dc49a7d0cf0526ac482a371a97d36b5913466bd5dab11f3ab9e7353fc796b3e70dc232e2821ac9b5c2865543fbc44c607f38d9cbd65ec8cc81b027e5caf20d3a9d65bd97c48e67b45f7e4616a7e1f86795f2b2a0972401f7f76ca11ee23dbf7ab7c08316830676eb48252544963447e16508fe6f6b9ade00d468fb6a3f664936e4f94f824be33bbebd3b0a6a656f440fd0317cb45497298e94f21165da0c52f103693493c8dcbf0d1e738938b8d0e2b9fbaf219f40db521e687595d2ac1733517f0af141e090b830715c9340c8a9e41ca695418fec6fc0c6f769bf93471936c185f8f32e6305b1b15fe690486114a6702bb4a1b299f84b06a0ed84a35109e94f3b0b3c1583b99f17fdf3118755d78909fe25de663f073b0b99de21eb2bc4eb26b9045ecb72a3ce756a75d619c74762ec6e26a18a8b0167bcc6b88dcff8756c082701f8cc85d0cd83a143e430a64eaf7df1ceebbf7d85d1d8c9caf37cd59ce6536884876c6c934596b4aadec75857a3aabe2743e7873f519c6cea067b9d8718ce40cc2d05a987993dec0318936e36da90097ef82fc01ad4247a43f3e5497f7f43a75f945761e5f1bb10a9742a2cbedf64ead2ef4dc90ab625aa5071d9d191d2d1b8e79e456e006fa7aeec4f7dfe826d7584897fce5eafe79c2c3b7e0c00e03b442b5dc0bb299a8d9637e726b02c336fd702c2bdaeff027c0457e19f427acfee24eb30ef7c541b749f693fb48b84356eccdd6b75941d73889c6872914afc5b45535b355a056c614c280278c807094e02a302420d822aacbaa4a8036e04924220bb44f60cf2a0a83a7b4e3b747e053db9125b0df6c7b35c996a9f713248f05e348cc7989ebac5a331190301e48a4f41f6fa99d35a611e8bceff7ee9e9a55e0b3fb16cf00ac50151f41322c22e013feae898061998036471531bed14e9e2867c7078f5c616bcbd27ce33a3c0599bc741e6153559ff2b7c62dde928b1c75767ec3897256ee8725440f6fe4bd095070d187338dab7570adf4d014410a9568ee447b8516fd30bcbb29a6ea5d837a6e47b45ef0c76a811155252282289494d01bc7f2472403655858bbf109b77e11958135d89ead30cd03058a63adc14ff1260a2b886edd7cead5624d5a3faf9fcb359f4e178ebe99cc546742d284392c20b0f203f0f889cf5717187db5d198b394bd01838b34b70e5a8a5ebebaeda68d3dfc588ee8cf51d972379815373975db1f987207a6733b1a5ffddc100afcbf724ec104f3b67affef79fcc05ec0038745503b0edc0f8add70d7b95c7690dbacbaf912676acf2109afee61ed332f5f55ed2448f3136f96246e18693418e0098fe963c2f37ae944f9abcc66bbfc2f9919306791faf0b96f6bf68566fb1a5dd63e9514b328f26e7b30407bc0191788aed48283dc5c5bfd8c1d06702cce686bee8e8cb1cef63fb88976b0a0072fa440d39ccfe737abf9ce40f442f841f9041e4baece9baeae9e62f42d272513f30c84ee8c8637c10e20f2e0a76579d0b060c72d0357708b3392f25a449aa58eee002c35f2bb87238429016124a59a4707303dfb5fa2a7cc6a0075d9e7c6062fcc15f8b171a1d5e64faf6bb6960932c40ed0af0dc0aeffbf5e365cec2680cab6c3e0e28b243bf2bf55e52df6af20c79c978bf91a93ce25996f30d7c3ca3e4001b3d01e45cf6402e966430be4d1d90c6997a6d9c9466901b35ee66c2c0fbe49b4b3673a80399e3218c702ea82e23f41ee4f78ec1787a7dacd72beebc02e7c92e58c1a6b9ff2517538b1d77beedcc9d0b2173e5947801310bc3413638ce88e624c0f4b4ba62a94166e3314a11bef16a367cd5d72e36eb9356db66f833097e2ca2d8608740308a81f1c8035c1e09fa2a7d308c310c5e921ff261589b619dde822250a574b14a07dc5b84f8293c9b4d5abfaa4009254ca979b92fb867025749a0df2f2f839f5796148390242af130aa4d90bba3fb3c9f172c7d011c81e392380de950169004e9d8bd49f0d65b51b75f2d531f996652ba744fcf4c356eda7b5f637d00a5d6d81ce388b372cea659ec214c8aeb07ecdc4d2fd506b685f126dbe5400947eced05f94560183baf55997466fac25d4be63e9f2786f370c8d7dea725c2c024d0f8c735cd7e2e9997239b9410635ef5c1ce6185afb73eca370f8858ebb2bbdf5368daf24a46c13cfa3b987faf0e79664ff44db8f9e5709e92c69aac7ab7d6f63fce69c13c64b305e6fdeff371d49c547e3deb2981d6b480eeea0f2310b72b0fa9171f5587d0e4b721305d3104e04e09d6645c991623cbbf8080c1a7a64dcdb9ef4e42f14a1df479cb9c774787cdbf7070143e8b4050ff6c76536cc3a3fc8cc083f1e40503943d60104a8c5ae9d619ef5c89603a60e171831ffc009a61b71b34225cc67d73e68712dc4c8125d404d4f104858cd3475f4e53792c44d54c84494b4b9204f76a8d3900ac405a866f1181f652dcca0fe84155fba17d1802801166016c7498815f537c52c3a742d0b39f8b39e362a20418261421a714603f79117f9cf7a52b57c5de4da2fbf65ca5e8b24c354ceffd4183667cafa2bcfb93644a59b0d9f7f7e69c1a72e0cc3af4bda0999bce840046e33fe93bdef3a3ffd7bca02c5efb373d1041d561d1f8acd8dcc01cd89ef43d902186939325ed59fee51729a143bd91c606da7c07fc09913eb212dccaa2911d842d85a1f85a72ffa5f57429a61ff7b045c80d311902c8955c66ed212c19f290507724f6f595fb72e76add0c27be640ed46816bc6569ac5c984df520625c3d47a970f72c154079dfa3cac5b4330474a4dc22e7caef727d6a5def22dd3fec4788321b24e78e568290d293945862988756c6a2cc31312c57f234782fd3310068be2f0cd02ea0b1c19d22a23330a03110bb7f858ccb98e3c70100818b03fc8689d4f25a2dcb94d39321d242e6f2fa392351e942a19ba22b053c30628d26a8a59617971f6d8f8b3ab8aae11a7f61bd6cc64c3614626d82d3028e38103a1b95ee2d5cbcedc87f9f99e18005c48f7bfb2b06cf30db6847cf8d6086d8adf4908ff0370a49bfec4a1a99c2a33db969e9d30971fadfc19238a6df5762f217ca107e245de3dac69ec2b207edd8b96d1d1930d63011e5d84708ae17c558a3ec4b2c16fd22c1a7ea8be17be5ea6e033e9ac2da52aa8039f48deba6e1dcf0262a988424a418b32f1d73e63766c6ea2e00ebaf9dc3de2b8d35af61479fa00feabc6aad48bf21e89126843db45129578d96304b08535d2e3ca3f258417cfd42c3f7a60721a4b69c8ec6e4db1f120f0cd64d06d54e48198ecb5ce867cc4113eea8415368e94c16ed60d284f79643a91e3eb173f427141a2e99f673e9e14ee2fa7b94b90b9ba1ce68504f3a768f2ae762ceb121b9b88d9358b481cb16219a8f3e26ee76dbb1481b0310b341e4f7724a5c193cf84e4168e72ff1e5da5e2be7d4b761de5305b7570ab8de1eaace1799835739afb7f66f795c9af31b9c0093aab4c6b47a8af6b72413c0336c6bdb2e9b71c43eba15ec6fd38ee9c7826693de85772920161b64656c6f2faebe95864619e082e69a533ea41c555e7c3d4f8ce900fc22501b2118c88f532fa3b12ca5f64212887ac7c9916caccdf650a7e3eaa761adc1a482b692a8459b069f33d00899ba5ba10c88acd90c964993bf7691d44e9c7c6cfcf92a45c195d04ba9ef4477bd4fd1e6823d9ab50071a3dc902d04b623ee36de966e85a4f48fd34a3b6a25139ba3ec049cafc55a3cac5c4deddc1bd359572be8e45ab51e40416186b3e24d5fe9b5bb61800de07015d49a0546b14ee310fcaf7abea763a1f3d7807e4e5f756599e392b6d1e04011717da441cc408c2da11a28bc6774cb4de59cd51887bc9b3b99742bb98a43f68522bef3439c9bb43b698f224971334ba4dda6ded8a8b3cd812da129b4e38affee6ed7664ff040f63b669d7bd39ab0abd26302ff2f241bff0194d7d8b5906e3451eef9a13908eabadabcbc9bb574c5f3df8f8f6e74e0dc895ed092cfb1ff3f4591e453c5d4fb2c1e76e975ab82cba40dd17e244a78b0335cc83a1486ab6de8a9c808a0c15e8159518b175e5ebca3ecebe27422593402146bb9084d45c374c7ba8df851be0fed2ec2668f99e5affc42b6e7fff248eb14d2b73ae668630235ea2f036759d02ce39b4919a0fca364a3d375cabc2bc1fbd7cba9e526b91aed2c329b8bb50e061a75c14857b47bdd0d4b8bebdbb240e6f49007b61b57897cf66e892e83da78f48a9a53d2bdd529b251a8011fa7ce3dc204f6dd80abaeb3eb3b866a818c0dc4d5d0be8312f86801588a93378fb746788f446e9a0e0ed5eaf5b58252a71a4bc09df34bc11b93ab489d8d2f1a64ec7602bad4a573c5e8762d80da708ab262b31e7835f6476f68e447bcf0c81aa4abfd5482749390b3648fc9f8911c1fe3b2eed382c6b6ffbf45c93737d7c68f0071585ccf640fadff48ce29e6d8836d7e578f4118aadce6ff131ab60eea462b5962d393585d42bd365b21eb3af138a81cc27e48860862a6a606d762d560fc6030f09938a57a1c2713076872e225a13d89763b5f075129db81cdd35d98b15cb2d6901b885841849ad5e4faa0807abc10e527870f8ed3d1acdb0f728372615023a76fc53cffa76ce7b2bb72918b325e8972347b684309b645c190a75d2eaae3ea0b75648e43242f34e8acdbfab7296ad3480034eaba5c85fac7b028fda65d2a4da08cb621d825b0e6fcb507d60228d125a086aa6a46567059af2e789877f20dbc2f8f0992f621e9c4c89d090dfc9f7ac808128263a372b489cc19020b9d9342c8f147b4ee03a7e1b500531ca1ecc745fbe0ef6bf996d74fca88bb046adf5a9e774c0de6fdb6f9866644cfa6ea670d298bbc3eb59868538a603420d1cc6d0596457a9ae7c8c1363bbe6fe11a5e0e4248a52839915a9627d36db22a66c72e85128c20fd9995940a6694948a1a19200c78163fcfe2da97466f4601647ddf507dbc73f8e51ad0fba3a689e7c178d686a74c80260fc99568e243b60153b716f52e06d4532e603d631ad45f2be74ac24b5adc7f75c0836aa8b8e6788b9d27b90702b556aefb411bdf4b633b161f3aa5f414e659d17a05aaab737882a4d2deba28aa29f1cd6ec46c6e3d34f0055ee263d4fe5c8e493c54df63b5a4fbbc309f61978fd6097f4f8b12a8110dc398a203f7c01fe5e9e23d0751e14f69fc48ac9cb92e1ce2aae857f226ce3b4b14b3fee985444fe551da002b5e33ad40f6ce281762dab993370cfbe43dc4c4e9ca5e8a2579f7686e6a8e7736fa0338185135d4d14917809560bfa681544c9fb2f390e3b03fb23f70f065a8af4028036638d27912623a37da03a6a22250b7d18826d936762da0d85d494c8fbe244d3682087c70c0476e0f850956be6ac59a3c976b904a8f8e678e8cf6562cfe44e274a80cb30f9149dcab2c53bb5c863ea834c4139a7d360bcfeeb1f73e4b89a3ac0645388ec896b70452", 0x10a1}], 0x5}, 0x4)
close(0xffffffffffffffff)
socket$kcm(0x29, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="2e00000011008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0)

18:37:38 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:38 executing program 0:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

[ 1638.571206][ T3325] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[ 1638.584817][   T27] kauditd_printk_skb: 6 callbacks suppressed
[ 1638.584833][   T27] audit: type=1804 audit(1590431858.056:1547): pid=3327 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/899/bus" dev="sda1" ino=16210 res=1
18:37:38 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1638.604885][ T3325] netlink: 'syz-executor.5': attribute type 29 has an invalid length.
[ 1638.633788][   T27] audit: type=1800 audit(1590431858.096:1548): pid=3327 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16210 res=0
[ 1638.669336][ T3331] netlink: 'syz-executor.5': attribute type 10 has an invalid length.
[ 1638.686625][   T27] audit: type=1804 audit(1590431858.106:1549): pid=3327 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/899/bus" dev="sda1" ino=16210 res=1
18:37:38 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:38 executing program 0:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

[ 1638.741058][   T27] audit: type=1804 audit(1590431858.106:1550): pid=3327 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir206735085/syzkaller.DXX2qh/899/bus" dev="sda1" ino=16210 res=1
18:37:38 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1638.827409][ T3336] device hsr0 entered promiscuous mode
[ 1638.836346][ T3336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
18:37:38 executing program 5:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000640)=ANY=[], 0x17)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

[ 1638.859834][   T27] audit: type=1800 audit(1590431858.106:1551): pid=3327 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16210 res=0
[ 1638.910073][ T3336] device hsr0 left promiscuous mode
[ 1638.948131][   T27] audit: type=1804 audit(1590431858.137:1552): pid=3328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1194/bus" dev="sda1" ino=16226 res=1
18:37:38 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:38 executing program 0:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

[ 1639.060377][ T3332] device hsr0 entered promiscuous mode
[ 1639.066400][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1639.089713][   T27] audit: type=1804 audit(1590431858.137:1553): pid=3328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1194/bus" dev="sda1" ino=16226 res=1
18:37:38 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

18:37:38 executing program 2:
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='threaded\x00', 0xffffff1f)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x240400, 0x0)
close(r0)

18:37:38 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

[ 1639.196881][   T27] audit: type=1804 audit(1590431858.147:1554): pid=3328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1194/bus" dev="sda1" ino=16226 res=1
[ 1639.297827][   T27] audit: type=1804 audit(1590431858.337:1555): pid=3339 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1195/bus" dev="sda1" ino=16192 res=1
18:37:38 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:38 executing program 0:
r0 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

18:37:38 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

[ 1639.375597][   T27] audit: type=1804 audit(1590431858.357:1556): pid=3339 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir222067728/syzkaller.qXroOl/1195/bus" dev="sda1" ino=16192 res=1
18:37:39 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:39 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1b0000001e0081aee405dc09800000000000000000000000000008", 0x1b}], 0x1}, 0x0)

18:37:39 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:39 executing program 0:
r0 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

18:37:39 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

18:37:39 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:39 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

18:37:39 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000100)=0x9)
write$cgroup_int(r0, &(0x7f0000000200), 0x400086)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040))
close(r1)

18:37:39 executing program 0:
r0 = socket$kcm(0x10, 0x0, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

18:37:39 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:39 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:39 executing program 0:
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

18:37:40 executing program 2:
socket$kcm(0xa, 0x3, 0x11)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}, 0x200408c4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='F', 0x1}], 0x1}, 0x4004085)
sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x17ffe}], 0x1, 0x0, 0x0, 0x600}, 0x0)

18:37:40 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(r2, 0x0, r1)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

18:37:40 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:40 executing program 0:
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

18:37:40 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:40 executing program 0:
socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x704, &(0x7f0000000100)=[{&(0x7f0000000080)="4c000000120081ae08060c0f006b3f007f03e3f700000000000000ca1b4e0906a6bd7c493872f74a375ed08a56331dbf64705465ce960169381ad6e747033a0093ba446b9bbc7a0600000000", 0x4c}], 0x1}, 0x0)

18:37:40 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:40 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(r2, 0x0, r1)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

18:37:40 executing program 2:
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0)
getpid()
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x8}, 0x0)

[ 1641.054326][ T3409] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[ 1641.074221][ T3409] team0: Device ipvlan1 failed to register rx_handler
18:37:40 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:40 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:40 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, 0x0, 0x0)

18:37:40 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fcntl$dupfd(r2, 0x0, r1)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

18:37:40 executing program 2:
socket$kcm(0xa, 0x3, 0x11)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}, 0x200408c4)
gettid()
perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='F', 0x1}], 0x1}, 0x4004085)
sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x17ffe}], 0x1, 0x0, 0x0, 0x600}, 0x0)

18:37:41 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, 0x0, 0x0)

18:37:41 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:41 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

18:37:41 executing program 4:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:41 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}, 0x200408c4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='F', 0x1}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x74, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x17ffe}], 0x1, 0x0, 0x0, 0x600}, 0x0)

18:37:41 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, 0x0, 0x0)

18:37:41 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:41 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r1, 0x1000)
lseek(r1, 0x0, 0x2)
r2 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r3, 0x1000)
lseek(r3, 0x0, 0x2)
r4 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0)
sendfile(r3, r4, 0x0, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe)

18:37:41 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0)

18:37:41 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

18:37:41 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x120, 0x4)
bind$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x1, 0x8804)
sendto$inet(r0, &(0x7f0000001480)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffffffffffe4a, 0x68, 0x0, 0x0)

18:37:41 executing program 2:
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}, 0x200408c4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='F', 0x1}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000001400)={0x0, 0x74, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x17ffe}], 0x1, 0x0, 0x0, 0x600}, 0x0)

[ 1642.267833][ T3438] ==================================================================
[ 1642.276358][ T3438] BUG: KCSAN: data-race in futex_wait_queue_me / mm_update_next_owner
[ 1642.284494][ T3438] 
[ 1642.286978][ T3438] write to 0xffff8880828fd064 of 4 bytes by task 3436 on cpu 1:
[ 1642.294759][ T3438]  futex_wait_queue_me+0x17d/0x290
[ 1642.300008][ T3438]  futex_wait+0x17e/0x3a0
[ 1642.304470][ T3438]  do_futex+0xe2/0x15b0
[ 1642.308680][ T3438]  __x64_sys_futex+0x2dc/0x410
[ 1642.313584][ T3438]  do_syscall_64+0xc7/0x3b0
[ 1642.318211][ T3438]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1642.324803][ T3438] 
[ 1642.327230][ T3438] read to 0xffff8880828fd064 of 4 bytes by task 3438 on cpu 0:
[ 1642.335048][ T3438]  mm_update_next_owner+0x376/0x5a0
[ 1642.340972][ T3438]  do_exit+0x63c/0x11e0
[ 1642.345192][ T3438]  do_group_exit+0xae/0x1a0
[ 1642.349862][ T3438]  __x64_sys_exit_group+0x2b/0x30
[ 1642.354949][ T3438]  do_syscall_64+0xc7/0x3b0
[ 1642.359852][ T3438]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1642.365870][ T3438] 
[ 1642.368196][ T3438] Reported by Kernel Concurrency Sanitizer on:
[ 1642.374433][ T3438] CPU: 0 PID: 3438 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0
[ 1642.383179][ T3438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1642.395184][ T3438] ==================================================================
[ 1642.403497][ T3438] Kernel panic - not syncing: panic_on_warn set ...
[ 1642.410340][ T3438] CPU: 0 PID: 3438 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0
[ 1642.419158][ T3438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1642.430240][ T3438] Call Trace:
[ 1642.433719][ T3438]  dump_stack+0x11d/0x187
[ 1642.438192][ T3438]  panic+0x210/0x640
[ 1642.442095][ T3438]  ? vprintk_func+0x89/0x13a
[ 1642.447098][ T3438]  kcsan_report.cold+0xc/0x1a
[ 1642.452096][ T3438]  kcsan_setup_watchpoint+0x3fb/0x440
[ 1642.458322][ T3438]  mm_update_next_owner+0x376/0x5a0
[ 1642.463627][ T3438]  do_exit+0x63c/0x11e0
[ 1642.470302][ T3438]  ? __sanitizer_cov_trace_switch+0x45/0x70
[ 1642.476608][ T3438]  ? __read_once_size+0x7c/0x100
[ 1642.482406][ T3438]  ? zap_other_threads+0x113/0x140
[ 1642.488252][ T3438]  do_group_exit+0xae/0x1a0
[ 1642.493381][ T3438]  __x64_sys_exit_group+0x2b/0x30
[ 1642.499340][ T3438]  do_syscall_64+0xc7/0x3b0
[ 1642.505282][ T3438]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 1642.512106][ T3438] RIP: 0033:0x45ca29
[ 1642.516011][ T3438] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1642.537993][ T3438] RSP: 002b:00007ffe08f2b9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 1642.546663][ T3438] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 000000000045ca29
[ 1642.554640][ T3438] RDX: 0000000000416621 RSI: fffffffffffffff7 RDI: 0000000000000000
[ 1642.562841][ T3438] RBP: 0000000000000000 R08: 00000000d3875ad4 R09: 00007ffe08f2ba10
[ 1642.571149][ T3438] R10: 00000000d3875ad0 R11: 0000000000000246 R12: 0000000000000000
[ 1642.579320][ T3438] R13: 00007ffe08f2ba10 R14: 0000000000000000 R15: 00007ffe08f2ba20
[ 1643.736356][ T3438] Shutting down cpus with NMI
[ 1643.742787][ T3438] Kernel Offset: disabled
[ 1643.747875][ T3438] Rebooting in 86400 seconds..