[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   34.380690][   T26] audit: type=1800 audit(1571840194.299:25): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2447 res=0
[   34.408457][   T26] audit: type=1800 audit(1571840194.299:26): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0
[   34.449018][   T26] audit: type=1800 audit(1571840194.299:27): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts.
2019/10/23 14:16:46 fuzzer started
2019/10/23 14:16:47 dialing manager at 10.128.0.105:40369
2019/10/23 14:16:50 syscalls: 2524
2019/10/23 14:16:50 code coverage: enabled
2019/10/23 14:16:50 comparison tracing: enabled
2019/10/23 14:16:50 extra coverage: extra coverage is not supported by the kernel
2019/10/23 14:16:50 setuid sandbox: enabled
2019/10/23 14:16:50 namespace sandbox: enabled
2019/10/23 14:16:50 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/23 14:16:50 fault injection: enabled
2019/10/23 14:16:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/23 14:16:50 net packet injection: enabled
2019/10/23 14:16:50 net device setup: enabled
2019/10/23 14:16:50 concurrency sanitizer: enabled
14:16:51 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r0, r4, 0x0, 0x88000fc000000)

14:16:51 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x69f, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x8, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x4, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2010, 0x0, 0x7, 0xf, 0xffff, 0x1f}, r2, 0x9, 0xffffffffffffffff, 0x2)
capget(&(0x7f0000000000)={0x40013548, r2}, &(0x7f0000000040)={0x5, 0x8, 0x0, 0x3, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x14)
dup3(r4, r3, 0x0)

syzkaller login: [   51.631813][ T7211] IPVS: ftp: loaded support on port[0] = 21
[   51.783460][ T7211] chnl_net:caif_netlink_parms(): no params data found
[   51.847022][ T7214] IPVS: ftp: loaded support on port[0] = 21
[   51.859748][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.874687][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.883801][ T7211] device bridge_slave_0 entered promiscuous mode
[   51.903087][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.910351][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.918356][ T7211] device bridge_slave_1 entered promiscuous mode
14:16:51 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

[   51.967585][ T7211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.992951][ T7211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.070079][ T7214] chnl_net:caif_netlink_parms(): no params data found
[   52.094339][ T7211] team0: Port device team_slave_0 added
[   52.111503][ T7211] team0: Port device team_slave_1 added
[   52.203922][ T7211] device hsr_slave_0 entered promiscuous mode
14:16:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)

[   52.270506][ T7211] device hsr_slave_1 entered promiscuous mode
[   52.340234][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.347334][ T7211] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.354743][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.361977][ T7211] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.405983][ T7217] IPVS: ftp: loaded support on port[0] = 21
[   52.430913][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.437998][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.450512][ T7214] device bridge_slave_0 entered promiscuous mode
[   52.475147][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.482371][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.491321][ T7214] device bridge_slave_1 entered promiscuous mode
[   52.536276][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.555804][ T7214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.581175][ T7214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.598195][ T7211] 8021q: adding VLAN 0 to HW filter on device team0
[   52.607999][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.617435][   T17] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.636734][   T17] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.646721][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   52.673156][ T7219] IPVS: ftp: loaded support on port[0] = 21
14:16:52 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@loopback}}}, [@policy_type={0xc, 0x10, {0x9}}]}, 0xcc}}, 0x0)

[   52.684175][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.695397][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.702541][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.752440][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.763369][ T2404] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.770489][ T2404] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.783194][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   52.795603][ T7214] team0: Port device team_slave_0 added
[   52.835918][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   52.847265][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   52.857150][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.868085][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   52.878159][ T7214] team0: Port device team_slave_1 added
[   52.888509][ T7211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   52.949139][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv0
[   53.013214][ T7214] device hsr_slave_0 entered promiscuous mode
14:16:53 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[   53.112355][ T7214] device hsr_slave_1 entered promiscuous mode
[   53.151767][ T7214] debugfs: Directory 'hsr0' with parent '/' already present!
[   53.169130][ T7217] chnl_net:caif_netlink_parms(): no params data found
[   53.172851][ T7223] IPVS: ftp: loaded support on port[0] = 21
[   53.255013][ T7229] IPVS: ftp: loaded support on port[0] = 21
[   53.315995][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.323353][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.331408][ T7217] device bridge_slave_0 entered promiscuous mode
[   53.388206][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.395622][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.404765][ T7217] device bridge_slave_1 entered promiscuous mode
[   53.441606][ T7233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[   53.484784][ T7214] 8021q: adding VLAN 0 to HW filter on device bond0
[   53.498825][ T7217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.520751][ T7217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.532262][ T7219] chnl_net:caif_netlink_parms(): no params data found
[   53.557905][ T7214] 8021q: adding VLAN 0 to HW filter on device team0
[   53.584873][ T7217] team0: Port device team_slave_0 added
[   53.592306][   T26] kauditd_printk_skb: 3 callbacks suppressed
14:16:53 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r0, r4, 0x0, 0x88000fc000000)

[   53.592334][   T26] audit: type=1800 audit(1571840213.509:31): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16521 res=0
[   53.625045][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.650652][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.676714][ T7217] team0: Port device team_slave_1 added
[   53.714165][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.729725][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.741977][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.750671][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.760691][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.769388][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.778892][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.785968][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.803125][ T7219] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.810533][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.818248][ T7219] device bridge_slave_0 entered promiscuous mode
[   53.828578][ T7219] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.835899][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.844300][ T7219] device bridge_slave_1 entered promiscuous mode
14:16:53 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r0, r4, 0x0, 0x88000fc000000)

[   53.865091][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.937755][ T7219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.013273][ T7217] device hsr_slave_0 entered promiscuous mode
[   54.050984][ T7217] device hsr_slave_1 entered promiscuous mode
[   54.110226][ T7217] debugfs: Directory 'hsr0' with parent '/' already present!
[   54.123363][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.142412][ T7223] chnl_net:caif_netlink_parms(): no params data found
[   54.154461][ T7219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.177375][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.186901][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.196308][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
14:16:54 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r0, r4, 0x0, 0x88000fc000000)

[   54.213565][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.230473][ T7219] team0: Port device team_slave_0 added
[   54.238542][ T7219] team0: Port device team_slave_1 added
[   54.277610][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.301085][ T2995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.329008][ T7229] chnl_net:caif_netlink_parms(): no params data found
[   54.358760][ T7214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.370052][ T7214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
14:16:54 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r0, r4, 0x0, 0x88000fc000000)

[   54.413400][ T7219] device hsr_slave_0 entered promiscuous mode
[   54.445906][ T7219] device hsr_slave_1 entered promiscuous mode
[   54.500234][ T7219] debugfs: Directory 'hsr0' with parent '/' already present!
[   54.517449][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.525701][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.534505][ T7223] device bridge_slave_0 entered promiscuous mode
[   54.544848][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.554728][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.563456][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.572111][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.581153][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.598454][ T7214] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.616124][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0
14:16:54 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r0, r4, 0x0, 0x88000fc000000)

[   54.644742][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.653112][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.673318][ T7223] device bridge_slave_1 entered promiscuous mode
[   54.694265][ T7217] 8021q: adding VLAN 0 to HW filter on device team0
[   54.731490][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.739560][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.770162][ T7223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.802390][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.809558][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.817805][ T7229] device bridge_slave_0 entered promiscuous mode
[   54.826597][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.833766][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.841997][ T7229] device bridge_slave_1 entered promiscuous mode
[   54.857518][ T7223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
14:16:54 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r0, r4, 0x0, 0x88000fc000000)

[   54.867884][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.882082][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.895183][ T2404] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.902335][ T2404] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.915243][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.925121][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.938329][ T2404] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.945462][ T2404] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.964783][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.974655][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.008879][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.018361][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.035523][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.048748][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.061304][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
14:16:55 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r0, r4, 0x0, 0x88000fc000000)

[   55.082419][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.131561][ T7219] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.178678][ T7223] team0: Port device team_slave_0 added
[   55.198945][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.238828][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.248452][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.256399][    C1] hrtimer: interrupt took 25279 ns
[   55.263317][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.272465][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.282822][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.309812][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.363849][ T7223] team0: Port device team_slave_1 added
[   55.370602][ T7219] 8021q: adding VLAN 0 to HW filter on device team0
[   55.398587][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.407855][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
14:16:55 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r0, r4, 0x0, 0x88000fc000000)

[   55.595440][ T7229] team0: Port device team_slave_0 added
[   55.615306][ T7229] team0: Port device team_slave_1 added
[   55.653902][ T7217] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.686285][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.696910][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.731392][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.738528][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.781104][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.789908][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.811465][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.818547][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.883809][ T7223] device hsr_slave_0 entered promiscuous mode
[   55.940669][ T7223] device hsr_slave_1 entered promiscuous mode
[   55.961092][ T7223] debugfs: Directory 'hsr0' with parent '/' already present!
[   55.980268][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.988379][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.023329][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.041710][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.060713][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.069677][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.101171][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.121581][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.130669][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.139251][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.149771][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.175232][ T7219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.233230][ T7229] device hsr_slave_0 entered promiscuous mode
[   56.270560][ T7229] device hsr_slave_1 entered promiscuous mode
[   56.310469][ T7229] debugfs: Directory 'hsr0' with parent '/' already present!
[   56.330413][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   56.383908][ T7219] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.504221][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.533165][ T7223] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.575887][ T7229] 8021q: adding VLAN 0 to HW filter on device team0
[   56.601463][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.613350][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.633062][ T7223] 8021q: adding VLAN 0 to HW filter on device team0
[   56.654358][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   56.665109][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   56.683334][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.716747][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.741879][ T2404] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.749135][ T2404] bridge0: port 1(bridge_slave_0) entered forwarding state
14:16:56 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x69f, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x8, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x4, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2010, 0x0, 0x7, 0xf, 0xffff, 0x1f}, r2, 0x9, 0xffffffffffffffff, 0x2)
capget(&(0x7f0000000000)={0x40013548, r2}, &(0x7f0000000040)={0x5, 0x8, 0x0, 0x3, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x14)
dup3(r4, r3, 0x0)

[   56.807994][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   56.818700][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   56.861173][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   56.893360][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.900578][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.919373][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   56.929107][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   56.938200][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   56.946848][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   56.955883][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.964559][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.973657][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   56.982252][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   56.990985][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.998019][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.006432][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.015305][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.023792][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.030864][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.038841][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   57.048100][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   57.065359][ T7223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.076637][ T7223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.149032][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   57.157753][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.174601][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.199513][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.221087][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.229998][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.253112][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   57.271133][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   57.290390][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   57.298985][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   57.308499][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   57.318733][ T3504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.370838][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   57.379181][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.407711][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
14:16:57 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)

[   57.431837][ T2404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   57.542874][ T7223] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.552570][ T7229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   57.629668][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.987013][   T26] audit: type=1804 audit(1571840217.899:32): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir351569107/syzkaller.Jvzv3o/0/bus" dev="sda1" ino=16536 res=1
14:16:57 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@loopback}}}, [@policy_type={0xc, 0x10, {0x9}}]}, 0xcc}}, 0x0)

[   58.396486][   T26] audit: type=1804 audit(1571840218.309:33): pid=7341 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir351569107/syzkaller.Jvzv3o/0/bus" dev="sda1" ino=16536 res=1
14:16:58 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:16:58 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x69f, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x8, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x4, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2010, 0x0, 0x7, 0xf, 0xffff, 0x1f}, r2, 0x9, 0xffffffffffffffff, 0x2)
capget(&(0x7f0000000000)={0x40013548, r2}, &(0x7f0000000040)={0x5, 0x8, 0x0, 0x3, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x14)
dup3(r4, r3, 0x0)

14:16:58 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:16:58 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0xfe28)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4c080)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4)
r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0)
ftruncate(r4, 0x10099b7)
sendfile(r0, r4, 0x0, 0x88000fc000000)

14:16:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)

14:16:58 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@loopback}}}, [@policy_type={0xc, 0x10, {0x9}}]}, 0xcc}}, 0x0)

14:16:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)

[   58.839186][   T26] audit: type=1804 audit(1571840218.749:34): pid=7357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir351569107/syzkaller.Jvzv3o/1/bus" dev="sda1" ino=16552 res=1
14:16:58 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:16:58 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@loopback}}}, [@policy_type={0xc, 0x10, {0x9}}]}, 0xcc}}, 0x0)

14:16:58 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:16:59 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:16:59 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[   59.373932][   T26] audit: type=1804 audit(1571840219.289:35): pid=7377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir275748077/syzkaller.GKo1rL/10/bus" dev="sda1" ino=16559 res=1
14:16:59 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:16:59 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x69f, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x8, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x4, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2010, 0x0, 0x7, 0xf, 0xffff, 0x1f}, r2, 0x9, 0xffffffffffffffff, 0x2)
capget(&(0x7f0000000000)={0x40013548, r2}, &(0x7f0000000040)={0x5, 0x8, 0x0, 0x3, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x14)
dup3(r4, r3, 0x0)

[   59.632397][   T26] audit: type=1804 audit(1571840219.519:36): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir351569107/syzkaller.Jvzv3o/2/bus" dev="sda1" ino=16550 res=1
14:16:59 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

[   59.743068][ T7377] syz-executor.0 (7377) used greatest stack depth: 9968 bytes left
[   59.809952][   T26] audit: type=1804 audit(1571840219.669:37): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir080436752/syzkaller.aBtfXD/4/bus" dev="sda1" ino=16542 res=1
14:16:59 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:16:59 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[   59.992769][   T26] audit: type=1804 audit(1571840219.839:38): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir891292217/syzkaller.MHGn68/4/bus" dev="sda1" ino=16549 res=1
14:17:00 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[   60.245935][   T26] audit: type=1804 audit(1571840220.159:39): pid=7403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir351569107/syzkaller.Jvzv3o/3/bus" dev="sda1" ino=16542 res=1
14:17:00 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:00 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[   60.618020][   T26] audit: type=1804 audit(1571840220.529:40): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir275748077/syzkaller.GKo1rL/11/bus" dev="sda1" ino=16559 res=1
14:17:00 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[   60.770480][   T26] audit: type=1804 audit(1571840220.529:41): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir080436752/syzkaller.aBtfXD/5/bus" dev="sda1" ino=16552 res=1
14:17:00 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[   60.975898][   T26] audit: type=1804 audit(1571840220.619:42): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir803579164/syzkaller.3XvSGs/4/bus" dev="sda1" ino=16554 res=1
14:17:01 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[   61.170280][   T26] audit: type=1804 audit(1571840220.789:43): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir501062362/syzkaller.1HS061/4/bus" dev="sda1" ino=16562 res=1
14:17:01 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:01 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:01 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:01 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:01 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:01 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:02 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:02 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:02 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:02 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:02 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:03 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@loopback}}}, [@policy_type={0xc, 0x10, {0x9}}]}, 0xcc}}, 0x0)

14:17:03 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:03 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:03 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:03 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:03 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@loopback}}}, [@policy_type={0xc, 0x10, {0x9}}]}, 0xcc}}, 0x0)

[   63.853910][   T26] kauditd_printk_skb: 16 callbacks suppressed
[   63.853953][   T26] audit: type=1804 audit(1571840223.759:60): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir501062362/syzkaller.1HS061/8/bus" dev="sda1" ino=16553 res=1
[   64.164925][   T26] audit: type=1804 audit(1571840223.989:61): pid=7506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir275748077/syzkaller.GKo1rL/14/bus" dev="sda1" ino=16568 res=1
14:17:04 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@loopback}}}, [@policy_type={0xc, 0x10, {0x9}}]}, 0xcc}}, 0x0)

14:17:04 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:04 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:04 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[   64.673785][   T26] audit: type=1804 audit(1571840224.589:62): pid=7518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir891292217/syzkaller.MHGn68/8/bus" dev="sda1" ino=16542 res=1
14:17:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)

[   64.825919][   T26] audit: type=1804 audit(1571840224.739:63): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir080436752/syzkaller.aBtfXD/9/bus" dev="sda1" ino=16578 res=1
14:17:04 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

14:17:04 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:04 executing program 1:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = creat(&(0x7f0000001c00)='./bus\x00', 0x0)
r1 = socket(0x2, 0x803, 0xff)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x0)
r2 = dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x800fe)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

[   65.017141][   T26] audit: type=1804 audit(1571840224.809:64): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir275748077/syzkaller.GKo1rL/15/bus" dev="sda1" ino=16461 res=1
14:17:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)

[   65.285065][   T26] audit: type=1804 audit(1571840225.199:65): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir891292217/syzkaller.MHGn68/9/bus" dev="sda1" ino=16585 res=1
[   65.492172][   T26] audit: type=1804 audit(1571840225.349:66): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir501062362/syzkaller.1HS061/9/bus" dev="sda1" ino=16564 res=1
14:17:05 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:05 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)

14:17:05 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:05 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:05 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:06 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:06 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x69f, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x8, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x4, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2010, 0x0, 0x7, 0xf, 0xffff, 0x1f}, r2, 0x9, 0xffffffffffffffff, 0x2)
capget(&(0x7f0000000000)={0x40013548, r2}, &(0x7f0000000040)={0x5, 0x8, 0x0, 0x3, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x14)
dup3(r4, r3, 0x0)

14:17:06 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x69f, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x8, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x4, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2010, 0x0, 0x7, 0xf, 0xffff, 0x1f}, r2, 0x9, 0xffffffffffffffff, 0x2)
capget(&(0x7f0000000000)={0x40013548, r2}, &(0x7f0000000040)={0x5, 0x8, 0x0, 0x3, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x14)
dup3(r4, r3, 0x0)

14:17:06 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:06 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x69f, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x8, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x4, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2010, 0x0, 0x7, 0xf, 0xffff, 0x1f}, r2, 0x9, 0xffffffffffffffff, 0x2)
capget(&(0x7f0000000000)={0x40013548, r2}, &(0x7f0000000040)={0x5, 0x8, 0x0, 0x3, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x14)
dup3(r4, r3, 0x0)

14:17:06 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:06 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:06 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:06 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000140)=@ipx, 0x0)
openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14:17:06 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x69f, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x8, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x4, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2010, 0x0, 0x7, 0xf, 0xffff, 0x1f}, r2, 0x9, 0xffffffffffffffff, 0x2)
capget(&(0x7f0000000000)={0x40013548, r2}, &(0x7f0000000040)={0x5, 0x8, 0x0, 0x3, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x14)
dup3(r4, r3, 0x0)

14:17:07 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), 0xc)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=<r2=>0x0)
perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x69f, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x8, 0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x4, 0xb89, 0x0, 0x56e, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2010, 0x0, 0x7, 0xf, 0xffff, 0x1f}, r2, 0x9, 0xffffffffffffffff, 0x2)
capget(&(0x7f0000000000)={0x40013548, r2}, &(0x7f0000000040)={0x5, 0x8, 0x0, 0x3, 0x2})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x14)
dup3(r4, r3, 0x0)

[   67.121619][ T7608] ==================================================================
[   67.129761][ T7608] BUG: KCSAN: data-race in common_perm_cond / task_dump_owner
[   67.137204][ T7608] 
[   67.139535][ T7608] read to 0xffff888124ca931c of 4 bytes by task 7605 on cpu 0:
[   67.147080][ T7608]  common_perm_cond+0x65/0x110
[   67.151842][ T7608]  apparmor_inode_getattr+0x2b/0x40
[   67.157053][ T7608]  security_inode_getattr+0x9b/0xd0
[   67.162249][ T7608]  vfs_getattr+0x2e/0x70
[   67.166490][ T7608]  vfs_statx+0x102/0x190
[   67.170731][ T7608]  __do_sys_newstat+0x51/0xb0
[   67.175407][ T7608]  __x64_sys_newstat+0x3a/0x50
[   67.180273][ T7608]  do_syscall_64+0xcc/0x370
[   67.184770][ T7608]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   67.190642][ T7608] 
[   67.192965][ T7608] write to 0xffff888124ca931c of 4 bytes by task 7608 on cpu 1:
[   67.200911][ T7608]  task_dump_owner+0xd8/0x260
[   67.205579][ T7608]  pid_update_inode+0x3c/0x70
[   67.210248][ T7608]  pid_revalidate+0x91/0xd0
[   67.214743][ T7608]  lookup_fast+0x6f2/0x700
[   67.219153][ T7608]  walk_component+0x6d/0xe80
[   67.223742][ T7608]  link_path_walk.part.0+0x5d3/0xa90
[   67.229023][ T7608]  path_openat+0x14f/0x36e0
[   67.233519][ T7608]  do_filp_open+0x11e/0x1b0
[   67.238103][ T7608]  do_sys_open+0x3b3/0x4f0
[   67.242520][ T7608]  __x64_sys_open+0x55/0x70
[   67.247028][ T7608]  do_syscall_64+0xcc/0x370
[   67.251529][ T7608]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   67.257404][ T7608] 
[   67.259726][ T7608] Reported by Kernel Concurrency Sanitizer on:
[   67.265879][ T7608] CPU: 1 PID: 7608 Comm: ps Not tainted 5.4.0-rc3+ #0
[   67.272632][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   67.282683][ T7608] ==================================================================
[   67.290740][ T7608] Kernel panic - not syncing: panic_on_warn set ...
[   67.297338][ T7608] CPU: 1 PID: 7608 Comm: ps Not tainted 5.4.0-rc3+ #0
[   67.304094][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   67.314156][ T7608] Call Trace:
[   67.317449][ T7608]  dump_stack+0xf5/0x159
[   67.321699][ T7608]  panic+0x210/0x640
[   67.325773][ T7608]  ? do_sys_open+0x3b3/0x4f0
[   67.330365][ T7608]  ? vprintk_func+0x8d/0x140
[   67.334957][ T7608]  kcsan_report.cold+0xc/0x10
[   67.339668][ T7608]  __kcsan_setup_watchpoint+0x32e/0x4a0
[   67.345335][ T7608]  ? __rcu_read_unlock+0x66/0x3c0
[   67.350376][ T7608]  __tsan_write4+0x32/0x40
[   67.354817][ T7608]  task_dump_owner+0xd8/0x260
[   67.359500][ T7608]  ? __rcu_read_unlock+0x66/0x3c0
[   67.364530][ T7608]  pid_update_inode+0x3c/0x70
[   67.369210][ T7608]  pid_revalidate+0x91/0xd0
[   67.373717][ T7608]  lookup_fast+0x6f2/0x700
[   67.378140][ T7608]  walk_component+0x6d/0xe80
[   67.382735][ T7608]  ? __tsan_read8+0x2c/0x30
[   67.387243][ T7608]  ? security_inode_permission+0xa5/0xc0
[   67.392957][ T7608]  link_path_walk.part.0+0x5d3/0xa90
[   67.398266][ T7608]  path_openat+0x14f/0x36e0
[   67.402779][ T7608]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   67.408415][ T7608]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   67.414158][ T7608]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   67.419798][ T7608]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   67.425434][ T7608]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   67.431101][ T7608]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   67.436730][ T7608]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   67.442368][ T7608]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   67.448004][ T7608]  ? __sanitizer_cov_trace_switch+0x49/0x80
[   67.453896][ T7608]  ? __kcsan_setup_watchpoint+0x6b/0x4a0
[   67.459536][ T7608]  do_filp_open+0x11e/0x1b0
[   67.464054][ T7608]  ? __alloc_fd+0x316/0x4c0
[   67.468741][ T7608]  do_sys_open+0x3b3/0x4f0
[   67.473191][ T7608]  __x64_sys_open+0x55/0x70
[   67.477704][ T7608]  do_syscall_64+0xcc/0x370
[   67.482212][ T7608]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   67.488100][ T7608] RIP: 0033:0x7f44d52b7120
[   67.492522][ T7608] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24
[   67.512122][ T7608] RSP: 002b:00007fff039b6c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[   67.520543][ T7608] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007f44d52b7120
[   67.528522][ T7608] RDX: 00007fff039b6c8f RSI: 0000000000000000 RDI: 00007fff039b6c80
[   67.536489][ T7608] RBP: 0000000000020000 R08: 0000000000000000 R09: 00007f44d557f55f
[   67.544464][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000019ff240
[   67.552430][ T7608] R13: 0000000000000020 R14: 00007f44d596c010 R15: 0000000000000000
[   67.561897][ T7608] Kernel Offset: disabled
[   67.566216][ T7608] Rebooting in 86400 seconds..