0)='ext2\x00', &(0x7f0000000080)='./file1/file0\x00', 0x1f, 0x0, 0x0, 0x89888, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f626172726965722c64656c61596c6f469ce3d04ebbb03078303030303030303030303030303030332c646973636172646f61642c736d61636b66737472616e736d7574653d75707065726469722c7375626a5f757365723d6c6f7765726469722c00"/115]) [ 629.640659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 13:18:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x0) 13:18:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 629.692872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.748703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.795865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.849135] device bridge_slave_1 left promiscuous mode [ 629.888750] bridge0: port 2(bridge_slave_1) entered disabled state 13:18:09 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 629.948283] audit: type=1804 audit(1599311889.884:1025): pid=31261 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/453/bus" dev="sda1" ino=15762 res=1 [ 630.207946] device bridge_slave_0 left promiscuous mode [ 630.228138] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.274808] audit: type=1804 audit(1599311889.924:1026): pid=31266 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir046460605/syzkaller.ZkCXzK/572/bus" dev="sda1" ino=15860 res=1 13:18:10 executing program 3: r0 = dup(0xffffffffffffffff) r1 = creat(0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) io_setup(0x0, &(0x7f0000000180)) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000840)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000880)=""/190, 0xbe) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000"], 0x5c, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x40400, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r2, 0x40, 0xa8, &(0x7f0000000200)="51ba1d6fd3ea242767b4b0160db8ee8a4838fbcc6c4053e2014f480391c3e3335759985828e3e3f38b79b6548081f64782495bcf395d57f3e09470bea159a264a1b355c4a80d9c452354398fa10d1c63b96047352b60d99ed110fa6990598e884918dc604bd70176f4ed868d2959b9472a42053271bc768efca026948bca55b773f53cc02f4b7a3ef50d864ba8e51abcc3b674208c5be57d4beed5950223d2d4e9453876ce650ed1", 0xc6, 0xa3, 0x7ff, 0xeb8b, 0x5, 0x3, 0x0, 'syz1\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x81, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1/file0\x00', 0x1f, 0x0, 0x0, 0x89888, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6f626172726965722c64656c61596c6f469ce3d04ebbb03078303030303030303030303030303030332c646973636172646f61642c736d61636b66737472616e736d7574653d75707065726469722c7375626a5f757365723d6c6f7765726469722c00"/115]) [ 630.327367] device veth1_macvtap left promiscuous mode [ 630.369169] device veth0_macvtap left promiscuous mode 13:18:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x7ff, 0x0, 0x3, 0xfffffffe}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRES32=r1, @ANYRES32], 0x20, 0x20004811}, 0x8001) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x0, 0x7fff}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) [ 630.409890] device veth1_vlan left promiscuous mode [ 630.429438] device veth0_vlan left promiscuous mode [ 630.459467] audit: type=1804 audit(1599311890.184:1027): pid=31241 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/547/bus" dev="sda1" ino=15740 res=1 [ 630.688125] audit: type=1804 audit(1599311890.504:1028): pid=31280 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/548/bus" dev="sda1" ino=15849 res=1 [ 630.839040] audit: type=1804 audit(1599311890.554:1029): pid=31280 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/548/bus" dev="sda1" ino=15849 res=1 [ 630.910732] bond2 (unregistering): Released all slaves [ 630.921600] bond1 (unregistering): Released all slaves [ 630.999097] device hsr_slave_1 left promiscuous mode [ 631.017219] device hsr_slave_0 left promiscuous mode [ 631.059228] team0 (unregistering): Port device team_slave_1 removed [ 631.080436] team0 (unregistering): Port device team_slave_0 removed [ 631.100450] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 631.133480] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 631.181464] bond0 (unregistering): Released all slaves [ 633.396897] IPVS: ftp: loaded support on port[0] = 21 [ 633.512133] chnl_net:caif_netlink_parms(): no params data found [ 633.565042] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.571449] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.579077] device bridge_slave_0 entered promiscuous mode [ 633.586173] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.592549] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.599711] device bridge_slave_1 entered promiscuous mode [ 633.618994] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 633.627705] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 633.647422] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 633.655338] team0: Port device team_slave_0 added [ 633.660657] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 633.667891] team0: Port device team_slave_1 added [ 633.686215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.692437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.717750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.728714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.735531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.760815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.771445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 633.779129] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 633.800581] device hsr_slave_0 entered promiscuous mode [ 633.806215] device hsr_slave_1 entered promiscuous mode [ 633.812043] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 633.819263] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 633.887987] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.894350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.900908] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.907282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.938000] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 633.944345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.951982] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 633.961996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 633.969497] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.977313] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.986574] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 633.992627] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.002180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 634.009866] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.016245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.027287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 634.034954] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.041270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.054236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 634.062047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.071884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.081383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.092845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.102328] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 634.108856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.121209] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 634.129031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 634.136184] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.146875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.198187] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 634.208295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 634.239790] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 634.247283] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 634.254577] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 634.263034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.271142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 634.278449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 634.287366] device veth0_vlan entered promiscuous mode [ 634.297190] device veth1_vlan entered promiscuous mode [ 634.302911] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 634.311586] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 634.323827] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 634.332808] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 634.340739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 634.348223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 634.358386] device veth0_macvtap entered promiscuous mode [ 634.364790] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 634.372690] device veth1_macvtap entered promiscuous mode [ 634.382252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 634.391187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 634.400034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 634.409984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.419383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 634.429131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.438283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 634.448313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.457487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 634.467387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.477299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 634.487042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.497762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.505280] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 634.512159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 634.521796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 634.532032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 634.542006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.551555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 634.561911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.571088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 634.581041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.590202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 634.599976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.609097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 634.618845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.628847] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 634.636055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.643031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 634.651018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:18:14 executing program 4 (fault-call:20 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:14 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 634.844899] audit: type=1804 audit(1599311894.784:1030): pid=31547 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/549/bus" dev="sda1" ino=16247 res=1 [ 635.046023] FAULT_INJECTION: forcing a failure. [ 635.046023] name failslab, interval 1, probability 0, space 0, times 0 [ 635.054743] audit: type=1804 audit(1599311894.944:1031): pid=31551 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/454/bus" dev="sda1" ino=16249 res=1 [ 635.057938] CPU: 1 PID: 31557 Comm: syz-executor.4 Not tainted 4.14.196-syzkaller #0 [ 635.090255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.099608] Call Trace: [ 635.102198] dump_stack+0x1b2/0x283 [ 635.105832] should_fail.cold+0x10a/0x154 [ 635.109987] should_failslab+0xd6/0x130 [ 635.113966] kmem_cache_alloc_trace+0x29a/0x3d0 [ 635.118641] alloc_pipe_info+0xaa/0x3c0 [ 635.122706] splice_direct_to_actor+0x580/0x730 [ 635.127379] ? avc_policy_seqno+0x5/0x10 [ 635.131441] ? selinux_file_permission+0x7e/0x530 [ 635.136283] ? generic_pipe_buf_nosteal+0x10/0x10 [ 635.141130] ? do_splice_to+0x140/0x140 [ 635.145103] ? rw_verify_area+0xe1/0x2a0 [ 635.149164] do_splice_direct+0x164/0x210 [ 635.153311] ? splice_direct_to_actor+0x730/0x730 [ 635.158158] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 635.163175] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 635.167933] do_sendfile+0x47f/0xb30 [ 635.171658] ? do_compat_writev+0x180/0x180 [ 635.175980] ? SyS_sendfile64+0x58/0x110 [ 635.180142] SyS_sendfile64+0xff/0x110 [ 635.184029] ? SyS_sendfile+0x130/0x130 [ 635.188004] ? do_syscall_64+0x4c/0x640 [ 635.191996] ? SyS_sendfile+0x130/0x130 [ 635.196235] do_syscall_64+0x1d5/0x640 [ 635.200129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 635.205318] RIP: 0033:0x45d5b9 [ 635.208504] RSP: 002b:00007ff958289c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 635.216216] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 635.223482] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000007 [ 635.230746] RBP: 00007ff958289ca0 R08: 0000000000000000 R09: 0000000000000000 [ 635.241311] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000000 [ 635.248581] R13: 00007ffe7195aa6f R14: 00007ff95828a9c0 R15: 000000000118d12c [ 635.450986] Bluetooth: hci3 command 0x0409 tx timeout 13:18:15 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:15 executing program 4 (fault-call:20 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000002c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x8, 0xa8d4, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x2, 0x2, 0x2, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r4}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r6}, 0x8) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000001090101000000001400000000000000030800064000009cfd08000540000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x8001) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000000)) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) dup2(r8, r2) 13:18:15 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:15 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f00000033c0)=ANY=[@ANYBLOB="1800000000000000000000003700000002000000950000005d2a000000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb3}, 0x48) [ 635.722563] audit: type=1804 audit(1599311894.974:1032): pid=31557 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/1/bus" dev="sda1" ino=16248 res=1 13:18:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="56019de8037ad4234dd5016ed7a4e5bce20d148c01fe28032719ee0e42dbd4c5c49757c3a7b8b69db72eb5dcb36312c0ac14f48c07ce8fc58f66064d8c31a7e7d78b5e7a9d7d667f393d2c9afdb17ba6aca8cea4feffb78dde214e673d9f4ee8bed369419bed911b7161e95c765fd4fda91c18e7974a39f549f95bb5dc8693b208dd1b1d518c9692099c6ca5d0dabb352149d97c7a548247ccbe0f3ba84be024e32933952de994428a89c7369cb890e49a", 0xb1) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x80}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x10a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r2, 0x0, 0x8400fffffff8) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000080)) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) [ 635.844730] audit: type=1804 audit(1599311894.974:1033): pid=31552 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir297428485/syzkaller.h3wF80/149/bus" dev="sda1" ino=15926 res=1 13:18:15 executing program 3: r0 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x688000, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0xff, 0x9, 0x4, 0x1000, 0x4, {}, {0x4, 0x2, 0xff, 0x1, 0x5, 0x2, "a0ecac2d"}, 0x1, 0x3, @offset=0x8, 0xffffffff}) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) [ 635.905838] audit: type=1804 audit(1599311895.224:1034): pid=31550 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir046460605/syzkaller.ZkCXzK/573/bus" dev="sda1" ino=16250 res=1 [ 635.996356] FAULT_INJECTION: forcing a failure. [ 635.996356] name failslab, interval 1, probability 0, space 0, times 0 [ 636.007912] CPU: 0 PID: 31590 Comm: syz-executor.4 Not tainted 4.14.196-syzkaller #0 [ 636.015799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.025148] Call Trace: [ 636.027734] dump_stack+0x1b2/0x283 [ 636.031371] should_fail.cold+0x10a/0x154 [ 636.035522] should_failslab+0xd6/0x130 [ 636.040626] __kmalloc+0x2c1/0x400 13:18:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffff7}}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in, 0x0, 0x0, 0x0, 0x1}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request}}}}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000100)=""/127, 0x7f}}, 0x10) [ 636.044166] ? alloc_pipe_info+0x140/0x3c0 [ 636.048403] alloc_pipe_info+0x140/0x3c0 [ 636.052466] splice_direct_to_actor+0x580/0x730 [ 636.057134] ? avc_policy_seqno+0x5/0x10 [ 636.061193] ? selinux_file_permission+0x7e/0x530 [ 636.066035] ? generic_pipe_buf_nosteal+0x10/0x10 [ 636.070881] ? do_splice_to+0x140/0x140 [ 636.074853] ? rw_verify_area+0xe1/0x2a0 [ 636.078912] do_splice_direct+0x164/0x210 [ 636.083091] ? splice_direct_to_actor+0x730/0x730 [ 636.087936] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 636.092951] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 636.097705] do_sendfile+0x47f/0xb30 [ 636.101424] ? do_compat_writev+0x180/0x180 [ 636.105758] SyS_sendfile64+0xff/0x110 [ 636.109643] ? SyS_sendfile+0x130/0x130 [ 636.113643] ? do_syscall_64+0x4c/0x640 [ 636.117610] ? SyS_sendfile+0x130/0x130 [ 636.121580] do_syscall_64+0x1d5/0x640 [ 636.125472] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 636.130650] RIP: 0033:0x45d5b9 [ 636.133830] RSP: 002b:00007ff958289c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 636.141526] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 636.148787] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000007 [ 636.156056] RBP: 00007ff958289ca0 R08: 0000000000000000 R09: 0000000000000000 [ 636.163330] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000001 [ 636.170594] R13: 00007ffe7195aa6f R14: 00007ff95828a9c0 R15: 000000000118d12c 13:18:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) splice(0xffffffffffffffff, &(0x7f00000000c0)=0x8, 0xffffffffffffffff, &(0x7f0000000180), 0x8001, 0xc) r4 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) sendmmsg(r4, &(0x7f0000002cc0), 0x1a3, 0xa201000000000bb8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)={0x0, 0x0, 0x4}) 13:18:16 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(0x0, 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 636.387182] audit: type=1804 audit(1599311895.604:1035): pid=31562 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/549/bus" dev="sda1" ino=16247 res=1 13:18:16 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:16 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(0x0, 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 636.793996] audit: type=1804 audit(1599311895.604:1036): pid=31562 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/549/bus" dev="sda1" ino=16247 res=1 13:18:16 executing program 4 (fault-call:20 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0x0, 0x0, [], [@ra={0x5, 0x2, 0x101}]}, 0x10) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 13:18:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x2, 0x5, 0x0, 0x4000000000, 0x10000, 0x1000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x4, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9fe89bcdc325e16c32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 636.842806] audit: type=1804 audit(1599311895.614:1037): pid=31563 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/549/bus" dev="sda1" ino=16247 res=1 13:18:16 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(0x0, 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x20, 0x3fa, 0x800, 0x70bd25, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x111) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="44c600000000000000000000003c08bdcfd15b70b9502ffa349d7b88a18768207e2aa4d714a64d22477a4161d3a60336da0ce802"], 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000200), 0x4) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0xa88, 0x0, 0x178, 0x178, 0x0, 0x178, 0x240, 0x9f0, 0x9f0, 0x9f0, 0x240, 0x4, 0x0, {[{{@ip={@multicast1, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'hsr0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv6=@mcast1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0, 'u32\x00'}, {[], 0x5}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xae8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000cc0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) 13:18:16 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 636.959338] audit: type=1804 audit(1599311895.614:1038): pid=31547 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/549/bus" dev="sda1" ino=16247 res=1 [ 637.136511] FAULT_INJECTION: forcing a failure. [ 637.136511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 637.148381] CPU: 0 PID: 31656 Comm: syz-executor.4 Not tainted 4.14.196-syzkaller #0 [ 637.156258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 637.165617] Call Trace: [ 637.168193] dump_stack+0x1b2/0x283 [ 637.171803] should_fail.cold+0x10a/0x154 [ 637.175952] __alloc_pages_nodemask+0x22c/0x2720 [ 637.180691] ? is_bpf_text_address+0x91/0x150 [ 637.185172] ? __do_page_cache_readahead+0x448/0x940 [ 637.190260] ? __radix_tree_lookup+0x1b5/0x2e0 [ 637.194827] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 637.199673] ? find_get_entry+0x339/0x630 [ 637.203805] ? ondemand_readahead.isra.0+0x514/0xb60 [ 637.208892] alloc_pages_current+0x155/0x260 [ 637.213280] generic_file_read_iter+0x187a/0x21c0 [ 637.218111] ext4_file_read_iter+0x14b/0x330 [ 637.222527] generic_file_splice_read+0x3a7/0x5c0 [ 637.227370] ? add_to_pipe+0x350/0x350 [ 637.231243] ? rw_verify_area+0xe1/0x2a0 [ 637.235283] ? add_to_pipe+0x350/0x350 [ 637.239496] do_splice_to+0xfb/0x140 [ 637.243190] splice_direct_to_actor+0x207/0x730 [ 637.247841] ? generic_pipe_buf_nosteal+0x10/0x10 [ 637.252664] ? do_splice_to+0x140/0x140 [ 637.256617] ? rw_verify_area+0xe1/0x2a0 [ 637.260658] do_splice_direct+0x164/0x210 [ 637.264787] ? splice_direct_to_actor+0x730/0x730 [ 637.269610] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 637.274603] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 637.279338] do_sendfile+0x47f/0xb30 [ 637.283034] ? do_compat_writev+0x180/0x180 [ 637.287341] SyS_sendfile64+0xff/0x110 [ 637.291205] ? SyS_sendfile+0x130/0x130 [ 637.295173] ? do_syscall_64+0x4c/0x640 [ 637.299141] ? SyS_sendfile+0x130/0x130 [ 637.303099] do_syscall_64+0x1d5/0x640 [ 637.306970] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 637.312135] RIP: 0033:0x45d5b9 [ 637.317994] RSP: 002b:00007ff958268c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 637.325680] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 637.332926] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000007 [ 637.340172] RBP: 00007ff958268ca0 R08: 0000000000000000 R09: 0000000000000000 [ 637.347438] R10: 00008400fffffffb R11: 0000000000000246 R12: 0000000000000002 [ 637.354694] R13: 00007ffe7195aa6f R14: 00007ff9582699c0 R15: 000000000118d1cc [ 637.595226] Bluetooth: hci3 command 0x041b tx timeout [ 637.657223] ip_tables: iptables: counters copy to user failed while replacing table 13:18:17 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:17 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 637.774902] audit: type=1804 audit(1599311895.824:1039): pid=31583 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/550/bus" dev="sda1" ino=16180 res=1 [ 637.790028] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 13:18:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 637.825066] ip_tables: iptables: counters copy to user failed while replacing table 13:18:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:17 executing program 3: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x101c00, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x1ff, 0x18, &(0x7f00000001c0)="3228b570f973639e3e85183d9c55674fe1005112a81f03b5", 0x30, 0x2, 0x5, 0xfff9, 0x8, 0x3, 0x0, 'syz0\x00'}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000100)) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000380)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x2000, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 13:18:17 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x1) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x10f) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c84d78906d78e4f22a300000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c965700000000000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:18 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:18 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:18 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:18 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:18 executing program 0: getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9, 0x1f}, &(0x7f0000000080)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 13:18:18 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6b6465763d2e2f66696c653008000ccd586fd1cc327500"]) 13:18:18 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:18 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x102740, 0x0) fcntl$setsig(r0, 0xa, 0x11) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x300, 0x0, 0x0, 0x0, 0x487}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r4, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'michael_mic-generic\x00'}}) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r7 = socket$inet(0x2, 0x3, 0x3) dup2(r7, r0) 13:18:18 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:19 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) 13:18:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) fcntl$lock(r0, 0x0, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x1c) semget$private(0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1f, 0x3, 0x5, 0x1, 0x0, 0x3, 0x40, 0x9150899f1d02f63, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xccee, 0x1, @perf_bp={&(0x7f0000000040), 0x7}, 0x10000, 0x7fff, 0x8e, 0x4, 0x7a97, 0x96c3, 0x2}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) ioctl$int_out(r3, 0x0, 0x0) getgid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x42002, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 13:18:19 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8}]}}]}, 0x3c}}, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x29c002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="110700000000000004000600000008000300", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r6, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:18:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012ced52810115128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r2], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 639.673426] Bluetooth: hci3 command 0x040f tx timeout [ 639.749102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 639.790701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 13:18:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:19 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) 13:18:19 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x1000000c8) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RGETLOCK(r5, 0x0, 0x20) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 639.879079] kauditd_printk_skb: 22 callbacks suppressed [ 639.879088] audit: type=1804 audit(1599311899.814:1062): pid=31740 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/5/bus" dev="sda1" ino=16268 res=1 13:18:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x4000000000009, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800000000}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x9d) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) 13:18:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) [ 640.170759] audit: type=1804 audit(1599311900.104:1063): pid=31791 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/459/bus" dev="sda1" ino=16272 res=1 13:18:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) [ 640.431781] audit: type=1804 audit(1599311900.364:1064): pid=31796 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/6/bus" dev="sda1" ino=16273 res=1 13:18:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f00eead42fbaa69fe599500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b96913b67506ac9cabbea901e0c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3639657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) [ 640.701313] audit: type=1804 audit(1599311900.515:1065): pid=31768 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/553/bus" dev="sda1" ino=16260 res=1 13:18:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x0) 13:18:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x0) [ 640.886093] audit: type=1804 audit(1599311900.815:1066): pid=31818 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/554/bus" dev="sda1" ino=16260 res=1 13:18:21 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x0) 13:18:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 641.237380] audit: type=1804 audit(1599311900.875:1067): pid=31821 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir297428485/syzkaller.h3wF80/160/bus" dev="sda1" ino=15854 res=1 13:18:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000800", @ANYRES32, @ANYBLOB="8aa605ff0000fcff"], 0x34}}, 0x0) 13:18:21 executing program 1 (fault-call:11 fault-nth:0): syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 641.440031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 641.466799] FAULT_INJECTION: forcing a failure. [ 641.466799] name failslab, interval 1, probability 0, space 0, times 0 [ 641.474004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 641.512133] audit: type=1804 audit(1599311901.445:1068): pid=31844 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/460/bus" dev="sda1" ino=16278 res=1 [ 641.524257] CPU: 1 PID: 31838 Comm: syz-executor.1 Not tainted 4.14.196-syzkaller #0 [ 641.544228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.553607] Call Trace: [ 641.556226] dump_stack+0x1b2/0x283 [ 641.559855] should_fail.cold+0x10a/0x154 [ 641.564010] should_failslab+0xd6/0x130 [ 641.567987] kmem_cache_alloc_trace+0x29a/0x3d0 [ 641.572665] alloc_pipe_info+0xaa/0x3c0 [ 641.576649] splice_direct_to_actor+0x580/0x730 [ 641.581580] ? avc_policy_seqno+0x5/0x10 [ 641.585645] ? selinux_file_permission+0x7e/0x530 [ 641.590480] ? generic_pipe_buf_nosteal+0x10/0x10 [ 641.595404] ? do_splice_to+0x140/0x140 [ 641.599361] ? rw_verify_area+0xe1/0x2a0 [ 641.603427] do_splice_direct+0x164/0x210 [ 641.607563] ? splice_direct_to_actor+0x730/0x730 [ 641.612402] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 641.617508] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 641.622364] do_sendfile+0x47f/0xb30 [ 641.626078] ? do_compat_writev+0x180/0x180 [ 641.630495] SyS_sendfile64+0xff/0x110 [ 641.634428] ? SyS_sendfile+0x130/0x130 [ 641.638402] ? do_syscall_64+0x4c/0x640 [ 641.642361] ? SyS_sendfile+0x130/0x130 [ 641.646325] do_syscall_64+0x1d5/0x640 [ 641.650206] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 641.655375] RIP: 0033:0x45d5b9 13:18:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x94, &(0x7f0000000040)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f50e00", 0x5a, 0x2f, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x30}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "5a5071059fb6e5c8935b9b39e0c64b9796250e47d902"}, {0x8, 0x88c0, 0x8000000, {{}, 0x1, {0xce}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}}}}}}}}, 0x0) [ 641.658548] RSP: 002b:00007f4632d78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 641.667552] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 641.674864] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 641.682118] RBP: 00007f4632d78ca0 R08: 0000000000000000 R09: 0000000000000000 [ 641.689411] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000000 [ 641.696671] R13: 00007fff049bf73f R14: 00007f4632d799c0 R15: 000000000118cf4c 13:18:21 executing program 1 (fault-call:11 fault-nth:1): syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 641.754056] Bluetooth: hci3 command 0x0419 tx timeout [ 641.840685] audit: type=1804 audit(1599311901.775:1069): pid=31857 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/7/bus" dev="sda1" ino=15856 res=1 13:18:21 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x80045006, 0xd00700) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x20) 13:18:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="521c4fb5471eeb540c8274", 0xb) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x1ea) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:21 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r1) setfsgid(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x1e3542, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r2, 0x446000) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)) ftruncate(r3, 0x2008001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10000, 0x0) fcntl$addseals(r4, 0x409, 0x4) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000002080)="e3", 0x1}], 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) [ 642.068042] audit: type=1804 audit(1599311902.005:1070): pid=31867 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/555/bus" dev="sda1" ino=15933 res=1 [ 642.078917] FAULT_INJECTION: forcing a failure. [ 642.078917] name failslab, interval 1, probability 0, space 0, times 0 [ 642.228045] CPU: 1 PID: 31865 Comm: syz-executor.1 Not tainted 4.14.196-syzkaller #0 [ 642.235956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.245652] Call Trace: [ 642.248249] dump_stack+0x1b2/0x283 [ 642.251883] should_fail.cold+0x10a/0x154 [ 642.256036] should_failslab+0xd6/0x130 [ 642.260014] __kmalloc+0x2c1/0x400 [ 642.263551] ? alloc_pipe_info+0x140/0x3c0 [ 642.267785] alloc_pipe_info+0x140/0x3c0 [ 642.271849] splice_direct_to_actor+0x580/0x730 [ 642.276519] ? avc_policy_seqno+0x5/0x10 [ 642.280573] ? selinux_file_permission+0x7e/0x530 [ 642.285411] ? generic_pipe_buf_nosteal+0x10/0x10 [ 642.290253] ? do_splice_to+0x140/0x140 [ 642.294226] ? rw_verify_area+0xe1/0x2a0 [ 642.298283] do_splice_direct+0x164/0x210 [ 642.302427] ? splice_direct_to_actor+0x730/0x730 [ 642.307276] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 642.312287] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 642.317041] do_sendfile+0x47f/0xb30 [ 642.320753] ? do_compat_writev+0x180/0x180 [ 642.325095] SyS_sendfile64+0xff/0x110 [ 642.328962] ? SyS_sendfile+0x130/0x130 [ 642.332921] ? do_syscall_64+0x4c/0x640 [ 642.336880] ? SyS_sendfile+0x130/0x130 [ 642.340860] do_syscall_64+0x1d5/0x640 [ 642.344742] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 642.349918] RIP: 0033:0x45d5b9 [ 642.353093] RSP: 002b:00007f4632d78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 642.360786] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 642.368044] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 13:18:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xd4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x960, 0x1000}, 0x0, 0x0, 0xe797, 0x0, 0xfffffffffffffffd, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000300)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000094) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000000100)) [ 642.375295] RBP: 00007f4632d78ca0 R08: 0000000000000000 R09: 0000000000000000 [ 642.382546] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000001 [ 642.389806] R13: 00007fff049bf73f R14: 00007f4632d799c0 R15: 000000000118cf4c 13:18:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r2], 0x20, 0x4810}, 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 13:18:22 executing program 1 (fault-call:11 fault-nth:2): syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:22 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001a00)={0x8, {'\x00', 0x1000}}, 0x1006) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x3, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x8000, 0xffffffffffffffff, &(0x7f0000000300)="f47b9c07d0a5692ea76785db06b6cbb97fa0b06e5888e109a6aae099c3dc9b0e7c041e8c296418e6a0c290dbf61b0bdaaa6371bc21136181f628bca8380104a1c8342858895b977d39bb0cfd44b31995f77acaf07ece4c3fadfcb6c3e0dc11eb304544e46f45", 0x66, 0x8, 0x0, 0x2, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000380)="ae8abc556239bd24b6e40446b450793432debbf9686dd1068aadecee84d2e38042d10af76a64e1ab2435733fe8de90c31103e867a620ca9884590df28ffa75850f15d0310f67063062e964511aa029bb141a6901104d39ff1812740768b554542db801cdbdd23d32f64450fe9e92e684fc8e0d65e0001c940a8e727771dd08d1c7e3b1", 0x83, 0x4, 0x0, 0x1, r5}]) r8 = open(&(0x7f0000000140)='./file0\x00', 0x22800, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 642.620865] FAULT_INJECTION: forcing a failure. [ 642.620865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 642.665650] CPU: 1 PID: 31888 Comm: syz-executor.1 Not tainted 4.14.196-syzkaller #0 [ 642.673555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.682904] Call Trace: [ 642.685494] dump_stack+0x1b2/0x283 [ 642.689127] should_fail.cold+0x10a/0x154 [ 642.693280] __alloc_pages_nodemask+0x22c/0x2720 [ 642.698065] ? __lock_acquire+0x5fc/0x3f20 [ 642.702302] ? security_inode_alloc+0x8d/0xd0 [ 642.706797] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 642.711648] ? __do_page_cache_readahead+0x236/0x940 [ 642.716749] alloc_pages_current+0x155/0x260 [ 642.721152] __page_cache_alloc+0x67/0x80 [ 642.725293] __do_page_cache_readahead+0x27e/0x940 [ 642.730218] ? read_cache_pages+0x6a0/0x6a0 [ 642.734539] ? lock_downgrade+0x740/0x740 [ 642.738687] ondemand_readahead.isra.0+0x514/0xb60 [ 642.743616] page_cache_sync_readahead+0xa6/0xf0 [ 642.748370] generic_file_read_iter+0xfbc/0x21c0 [ 642.753138] ext4_file_read_iter+0x14b/0x330 [ 642.757545] generic_file_splice_read+0x3a7/0x5c0 [ 642.762384] ? add_to_pipe+0x350/0x350 [ 642.766277] ? rw_verify_area+0xe1/0x2a0 [ 642.770332] ? add_to_pipe+0x350/0x350 [ 642.774214] do_splice_to+0xfb/0x140 [ 642.777924] splice_direct_to_actor+0x207/0x730 [ 642.782599] ? generic_pipe_buf_nosteal+0x10/0x10 [ 642.787421] ? do_splice_to+0x140/0x140 [ 642.791378] ? rw_verify_area+0xe1/0x2a0 [ 642.795463] do_splice_direct+0x164/0x210 [ 642.799617] ? splice_direct_to_actor+0x730/0x730 [ 642.804452] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 642.809459] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 642.814203] do_sendfile+0x47f/0xb30 [ 642.817910] ? do_compat_writev+0x180/0x180 [ 642.822215] SyS_sendfile64+0xff/0x110 [ 642.826087] ? SyS_sendfile+0x130/0x130 [ 642.830058] ? do_syscall_64+0x4c/0x640 [ 642.834011] ? SyS_sendfile+0x130/0x130 [ 642.838003] do_syscall_64+0x1d5/0x640 [ 642.841904] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 642.847095] RIP: 0033:0x45d5b9 [ 642.850279] RSP: 002b:00007f4632d78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 642.858052] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 642.865301] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 642.872566] RBP: 00007f4632d78ca0 R08: 0000000000000000 R09: 0000000000000000 [ 642.879814] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000002 [ 642.887076] R13: 00007fff049bf73f R14: 00007f4632d799c0 R15: 000000000118cf4c 13:18:22 executing program 0: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5) ftruncate(r1, 0x1000000) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000000)) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x81, 0x81, 0x5b}, 0x6) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000340)) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, 0x0) fchdir(0xffffffffffffffff) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10200, 0x0) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000002c0)={0x7, "df78141ee9a21363807645a05d0c0d90d965c09a49cda8bac9f5b5d1060fa135", 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x5, 0xfff}) copy_file_range(r2, &(0x7f00000000c0)=0x3, 0xffffffffffffffff, &(0x7f0000000100)=0x153, 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000000)=0xf18000, 0x40000000005) [ 642.905398] audit: type=1804 audit(1599311902.845:1071): pid=31902 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/461/bus" dev="sda1" ino=16285 res=1 13:18:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101ad00a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x9, &(0x7f0000001c00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x20, r2, &(0x7f00000002c0)="444249cc40e338c3b8d2b9d02ca33727d887edb5890163f761fe373eb229112ff2d44ccda896d096d0a0f65517bd9fead29f718c3b2c37f276a687921e40a902a728c6455df693e31c611867b955076a5741d45254b084ad810ba64ce92331a5168659ad324bc0f522c9b2b795b666f0bfa95a9555bf4669fc46799375c430312f873320bc32965cf85da2355e4223b6616522e8dc2c999b32712984ea9498f0e1128cd5b6622cef70a1b9518b39443efa2bbd8ce401dc0d30b7527dd40b3d684280ea89fb8869fb7c2c81d28cf7a23bf0da616514e99176d09a3f8427f1316eacf2f49eacc0b8235015cb3c6ee6eede7b", 0xf1, 0x1000, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000500)="dd005ab96e006828f43273c2fcb2e01b852b66d29b58d9ec4dfd1b466fa86815e7d20fbaa41a4d783cf6366a85676e7c824654b005f67f7f1e0e3c7dee4ff1f4dfeb16b5c6f7e1aa91b0053f877f0252f43e00e4eeb6706701d3995b93b2dd6102c88e0a8e5fc8757bef4e6fb56469802279637a1a947ab32f635f6705ccc742e4b91d6c9526ef53c9491c16df7022455e5603a9d7fb82387b584f2d7b59a76474b6d045d25eb9fc3fc96b45fc90417ee0f09e36b6a7c1e234fbca4e09e81896009d3856682b89280ccd45974eeff0c55566487655c708a8f37269921fc81911aefef7ce6529413b2da3a1cfadc954ce85bfd6784c5a", 0xf6, 0x80000001}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, &(0x7f0000000600)="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", 0xfe, 0x6, 0x0, 0x5, r4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000700)="63749d3ab96349f528a61e25abf8c26faccfff90c126954355e162baa5e6cbf9caa5ab567f0c384e51be20d09baefb97ca13f2f1450fc159dbb41ec952325eda0fd8fd362d80b1a4bb8ed552a264e765c0ea6b5cb32fd6d495a8b4e6d29c465f486394e8786301ebb19bf5b2740b4a452f92bdd61567215ca6e20c1a74326a64476c94cd6e31c295dd5948c6fbee8dd0", 0x90, 0x6e59d06b, 0x0, 0x3}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x8, 0xffffffffffffffff, &(0x7f00000007c0)="f252df8daedc24bdda7cc64e47aca52afc9811abb202baf9edfb9e4827412b228870c887207ac2d82007c77eca527fccf2d0025df6099a8ca00c8755e43f", 0x3e, 0x1ff, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f00000019c0)="16904d572c5dd527649871b3ad143453a14d2618014e6bdc044a789c81bf875051d883f71b8f411ddbd9b51985d086747cce856fdbd3be841b5e3e636d494f4ec813f354f55d3e79fed4f3e6d3c6df364664791d6dd14c21bf2fbf11bc835ccc26400d4ead15835895824877e69261a1730fdbe9c96cc041656f440c44ab75e9488a3d3f3752d144fffd5ae6d5b39595a50dde62bdc85755ef6514b26f6ba01ecf53d081de1a873d139b4d04d7712b5fab7daaf8227c66bd9a8d", 0xba, 0x8, 0x0, 0xc557c41569ab5ac6}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f00000008c0)="e6befe9048aa", 0x6, 0xbcd, 0x0, 0x3, r4}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x1, 0x3268, 0xffffffffffffffff, &(0x7f0000001a80)="859188d4eb515ecea2f3c5e4aa0f1be60ca8d1f9326e2809408c82f593b53011c85da6659e5295dbe0bda1b398236027f2c834bcd1130b17b8d2c496a0b11baffb74be1051cddba452553dd726fd8cff4e704a0b7f2546e4fb25f2b64e6bf65ea9ec42f0010f66dc65cdb9228e1aafbd4c1c91b0c14f77203a16eaca1d9c7e51a363bed63cf15248cb474841d44ac1872d1d63af19e33fc928618045dbc6f05976e4e95b", 0xa4, 0x9, 0x0, 0x2}, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x2, 0x80, 0xffffffffffffffff, &(0x7f0000001b80)="bd55fe443299c894f408b8fee487a155a75a0cde758edf195a47255cc6c3fa7a5873a1539c7130854d21d866bab950eb56b57c752b63df92edc69d", 0x3b, 0x5, 0x0, 0x2, r3}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:23 executing program 1 (fault-call:11 fault-nth:3): syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:23 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r2], 0x20, 0x4810}, 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) [ 643.410695] FAULT_INJECTION: forcing a failure. [ 643.410695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 643.457600] CPU: 0 PID: 31922 Comm: syz-executor.1 Not tainted 4.14.196-syzkaller #0 [ 643.465529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.474887] Call Trace: [ 643.477493] dump_stack+0x1b2/0x283 [ 643.481129] should_fail.cold+0x10a/0x154 [ 643.485275] __alloc_pages_nodemask+0x22c/0x2720 [ 643.490158] ? __lock_acquire+0x5fc/0x3f20 [ 643.494406] ? security_inode_alloc+0x8d/0xd0 [ 643.498889] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 643.503737] ? __do_page_cache_readahead+0x236/0x940 [ 643.508902] alloc_pages_current+0x155/0x260 [ 643.513302] __page_cache_alloc+0x67/0x80 [ 643.517453] __do_page_cache_readahead+0x27e/0x940 [ 643.522393] ? read_cache_pages+0x6a0/0x6a0 [ 643.526724] ? lock_downgrade+0x740/0x740 [ 643.530884] ondemand_readahead.isra.0+0x514/0xb60 [ 643.535821] page_cache_sync_readahead+0xa6/0xf0 [ 643.540582] generic_file_read_iter+0xfbc/0x21c0 [ 643.545464] ext4_file_read_iter+0x14b/0x330 [ 643.549863] generic_file_splice_read+0x3a7/0x5c0 [ 643.554697] ? add_to_pipe+0x350/0x350 [ 643.558575] ? rw_verify_area+0xe1/0x2a0 [ 643.562801] ? add_to_pipe+0x350/0x350 [ 643.566684] do_splice_to+0xfb/0x140 [ 643.570451] splice_direct_to_actor+0x207/0x730 [ 643.575124] ? generic_pipe_buf_nosteal+0x10/0x10 [ 643.579956] ? do_splice_to+0x140/0x140 [ 643.583929] ? rw_verify_area+0xe1/0x2a0 [ 643.588060] do_splice_direct+0x164/0x210 [ 643.592302] ? splice_direct_to_actor+0x730/0x730 [ 643.597137] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 643.602252] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 643.607086] do_sendfile+0x47f/0xb30 [ 643.610888] ? do_compat_writev+0x180/0x180 [ 643.615294] SyS_sendfile64+0xff/0x110 [ 643.619175] ? SyS_sendfile+0x130/0x130 [ 643.623179] ? do_syscall_64+0x4c/0x640 [ 643.627235] ? SyS_sendfile+0x130/0x130 [ 643.631197] do_syscall_64+0x1d5/0x640 [ 643.635172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 643.640345] RIP: 0033:0x45d5b9 [ 643.643520] RSP: 002b:00007f4632d78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 643.651219] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 643.658483] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 643.665755] RBP: 00007f4632d78ca0 R08: 0000000000000000 R09: 0000000000000000 [ 643.673017] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000003 [ 643.680274] R13: 00007fff049bf73f R14: 00007f4632d799c0 R15: 000000000118cf4c 13:18:23 executing program 1 (fault-call:11 fault-nth:4): syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:23 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) inotify_add_watch(r1, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvmmsg(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000100)={0x0, 0xc99f1b, "3db137b77310e211eabcd8e9fb51cefaaed3da5306b6e305", {0x2, 0xe81}, 0x2}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0xc0ca, 'syz1\x00', @null, 0x7, 0x0, [@bcast, @null, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) fcntl$setpipe(r4, 0x407, 0x7e6) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2={0xfc, 0x2, [], 0xfd}, 0x0, 0x48, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x3000) 13:18:23 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000500)}], 0x1, 0xd) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c7274e3eba2c49913157c882f6b62532c183ee72454abe524c5179dd527284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30df9bcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 643.830441] FAULT_INJECTION: forcing a failure. [ 643.830441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 643.847998] CPU: 0 PID: 31934 Comm: syz-executor.1 Not tainted 4.14.196-syzkaller #0 [ 643.855907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.865276] Call Trace: [ 643.867878] dump_stack+0x1b2/0x283 [ 643.871518] should_fail.cold+0x10a/0x154 [ 643.875862] __alloc_pages_nodemask+0x22c/0x2720 [ 643.880635] ? __lock_acquire+0x5fc/0x3f20 [ 643.884881] ? security_inode_alloc+0x8d/0xd0 [ 643.889472] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 643.894332] ? __do_page_cache_readahead+0x236/0x940 [ 643.899455] alloc_pages_current+0x155/0x260 [ 643.903876] __page_cache_alloc+0x67/0x80 [ 643.908032] __do_page_cache_readahead+0x27e/0x940 [ 643.913043] ? read_cache_pages+0x6a0/0x6a0 [ 643.917366] ? lock_downgrade+0x740/0x740 [ 643.921521] ondemand_readahead.isra.0+0x514/0xb60 [ 643.926668] page_cache_sync_readahead+0xa6/0xf0 [ 643.931433] generic_file_read_iter+0xfbc/0x21c0 [ 643.936305] ext4_file_read_iter+0x14b/0x330 [ 643.940706] generic_file_splice_read+0x3a7/0x5c0 [ 643.945540] ? add_to_pipe+0x350/0x350 [ 643.949426] ? rw_verify_area+0xe1/0x2a0 [ 643.953475] ? add_to_pipe+0x350/0x350 [ 643.957371] do_splice_to+0xfb/0x140 [ 643.961080] splice_direct_to_actor+0x207/0x730 [ 643.965866] ? generic_pipe_buf_nosteal+0x10/0x10 [ 643.970757] ? do_splice_to+0x140/0x140 [ 643.974737] ? rw_verify_area+0xe1/0x2a0 [ 643.978799] do_splice_direct+0x164/0x210 [ 643.982948] ? splice_direct_to_actor+0x730/0x730 [ 643.987917] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 643.992924] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 643.997689] do_sendfile+0x47f/0xb30 [ 644.003133] ? do_compat_writev+0x180/0x180 [ 644.007445] SyS_sendfile64+0xff/0x110 [ 644.011319] ? SyS_sendfile+0x130/0x130 [ 644.015287] ? do_syscall_64+0x4c/0x640 [ 644.019255] ? SyS_sendfile+0x130/0x130 [ 644.023226] do_syscall_64+0x1d5/0x640 13:18:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup2(r0, r0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080)=0x6, 0x4) clone(0x210200077c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6630726b6469723d6c65312c00cfcb0d1482b98cb71aff49906ec6e965524168e82d97befeb21ab554088bf22a59af141f88d74c9f143abed5e78b7078a350253db2b1e6224e8554c57f20bb5b79ec48eb0c888dd2c3e8d27c2aa6b6fd561ae6e61a5e5bf50e7db93a4f024ab8547e5cd293dfd4ecc47af8bb48ec71f09babec580e916606030dab0d225223dc9b37215b2d33aa16cda047fa1153fc43d3f6bd6fd2e8297df41b7431480ea4e1b027a5130000000000906e86c6506457e5"]) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) [ 644.027232] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 644.032421] RIP: 0033:0x45d5b9 [ 644.035598] RSP: 002b:00007f4632d78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 644.043301] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 644.050556] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 644.057812] RBP: 00007f4632d78ca0 R08: 0000000000000000 R09: 0000000000000000 [ 644.065070] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000004 [ 644.072323] R13: 00007fff049bf73f R14: 00007f4632d799c0 R15: 000000000118cf4c 13:18:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x800000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c804000000ddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c965731b81c30bcc8ffd09f97980fc113ea1ee50c61affde34a0fd608f3aa1a0f867f", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:24 executing program 1 (fault-call:11 fault-nth:5): syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:24 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x400001) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r3) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r3, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x3ff, 0xfdac) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x8, 0x4) [ 644.230440] overlayfs: unrecognized mount option "f0rkdir=le1" or missing value [ 644.300740] FAULT_INJECTION: forcing a failure. [ 644.300740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 644.330583] CPU: 0 PID: 31969 Comm: syz-executor.1 Not tainted 4.14.196-syzkaller #0 [ 644.338484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.347840] Call Trace: 13:18:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r2], 0x20, 0x4810}, 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 13:18:24 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0xc00, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x9, 0x558, 0x3, r3}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x5}, 0x90) r4 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f72c73d5416cd9713", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) [ 644.350436] dump_stack+0x1b2/0x283 [ 644.354074] should_fail.cold+0x10a/0x154 [ 644.358671] __alloc_pages_nodemask+0x22c/0x2720 [ 644.363436] ? __lock_acquire+0x5fc/0x3f20 [ 644.367677] ? security_inode_alloc+0x8d/0xd0 [ 644.372246] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 644.377105] ? __do_page_cache_readahead+0x236/0x940 [ 644.382347] alloc_pages_current+0x155/0x260 [ 644.386759] __page_cache_alloc+0x67/0x80 [ 644.391040] __do_page_cache_readahead+0x27e/0x940 [ 644.395990] ? read_cache_pages+0x6a0/0x6a0 13:18:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000002c0)='.\x00', 0x500003e) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x4040) r1 = inotify_init() ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r0, r2) [ 644.398878] 9pnet: Insufficient options for proto=fd [ 644.400319] ? lock_downgrade+0x740/0x740 [ 644.400337] ondemand_readahead.isra.0+0x514/0xb60 [ 644.400358] page_cache_sync_readahead+0xa6/0xf0 [ 644.400372] generic_file_read_iter+0xfbc/0x21c0 [ 644.408613] 9pnet: Insufficient options for proto=fd [ 644.409673] ext4_file_read_iter+0x14b/0x330 [ 644.409687] generic_file_splice_read+0x3a7/0x5c0 [ 644.409699] ? add_to_pipe+0x350/0x350 [ 644.409717] ? rw_verify_area+0xe1/0x2a0 [ 644.446557] ? add_to_pipe+0x350/0x350 [ 644.450450] do_splice_to+0xfb/0x140 [ 644.454161] splice_direct_to_actor+0x207/0x730 [ 644.458826] ? generic_pipe_buf_nosteal+0x10/0x10 [ 644.463663] ? do_splice_to+0x140/0x140 [ 644.467627] ? rw_verify_area+0xe1/0x2a0 [ 644.471679] do_splice_direct+0x164/0x210 [ 644.475815] ? splice_direct_to_actor+0x730/0x730 [ 644.480649] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 644.485656] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 644.490406] do_sendfile+0x47f/0xb30 [ 644.494114] ? do_compat_writev+0x180/0x180 [ 644.498432] SyS_sendfile64+0xff/0x110 [ 644.502308] ? SyS_sendfile+0x130/0x130 [ 644.506271] ? do_syscall_64+0x4c/0x640 [ 644.510234] ? SyS_sendfile+0x130/0x130 [ 644.514198] do_syscall_64+0x1d5/0x640 [ 644.518080] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 644.523255] RIP: 0033:0x45d5b9 [ 644.526430] RSP: 002b:00007f4632d78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 644.534125] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 644.541383] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 644.548639] RBP: 00007f4632d78ca0 R08: 0000000000000000 R09: 0000000000000000 [ 644.555895] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 644.563151] R13: 00007fff049bf73f R14: 00007f4632d799c0 R15: 000000000118cf4c 13:18:24 executing program 0: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)) sendto(0xffffffffffffffff, &(0x7f00000002c0)="d5fe6327a454985c7fe758edd92c048dcfc6f458e2ac7ffd05ff5dd14e0bb48c46f805e5242c3300abbaa893b43d8627ff364db731edfd6345c8cfacc6999c7667c1ac1991da71f75916f242845f9ad21f61c6edbb7c94e299f32d4faf44668f41c85f1df4924e26e797a2", 0x6b, 0x4008800, &(0x7f0000000380)=@pptp={0x18, 0x2, {0xa9, @loopback}}, 0x80) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="de2e8a9f66610f04e64303fce4a4a0281f4341a0d183a14e6599065aabf3dc2da7774095cd23fdefa59e6378cfd5ba317bdeb20caa699a3ca800abf993c75ef9a477a4ee2e7c7868531a028ee21a769af9d51f816697a86fc8442fe32a824b4f48bfe71829"], 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) open(&(0x7f00000000c0)='./bus\x00', 0x220a03, 0x0) mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff}, 0x80000002000030a2, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x22, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) 13:18:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) inotify_add_watch(r1, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvmmsg(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000100)={0x0, 0xc99f1b, "3db137b77310e211eabcd8e9fb51cefaaed3da5306b6e305", {0x2, 0xe81}, 0x2}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0xc0ca, 'syz1\x00', @null, 0x7, 0x0, [@bcast, @null, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) fcntl$setpipe(r4, 0x407, 0x7e6) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2={0xfc, 0x2, [], 0xfd}, 0x0, 0x48, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x3000) 13:18:24 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="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", 0x169}], 0x1, 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a6c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b35aa0bbc9ed162ca14958eb7d8b334c3bf77c977574deafe3f077552b9f70991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdb4f6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) inotify_add_watch(r1, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvmmsg(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000100)={0x0, 0xc99f1b, "3db137b77310e211eabcd8e9fb51cefaaed3da5306b6e305", {0x2, 0xe81}, 0x2}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0xc0ca, 'syz1\x00', @null, 0x7, 0x0, [@bcast, @null, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) fcntl$setpipe(r4, 0x407, 0x7e6) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2={0xfc, 0x2, [], 0xfd}, 0x0, 0x48, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x3000) 13:18:24 executing program 1 (fault-call:11 fault-nth:6): syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 645.108910] FAULT_INJECTION: forcing a failure. [ 645.108910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 645.122071] CPU: 1 PID: 32014 Comm: syz-executor.1 Not tainted 4.14.196-syzkaller #0 [ 645.129973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.139337] Call Trace: [ 645.141928] dump_stack+0x1b2/0x283 [ 645.143039] kauditd_printk_skb: 12 callbacks suppressed [ 645.143047] audit: type=1804 audit(1599311905.065:1084): pid=32016 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/10/bus" dev="sda1" ino=16293 res=1 [ 645.145580] should_fail.cold+0x10a/0x154 [ 645.145596] __alloc_pages_nodemask+0x22c/0x2720 [ 645.145616] ? __lock_acquire+0x5fc/0x3f20 [ 645.188446] ? security_inode_alloc+0x8d/0xd0 [ 645.192961] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 645.197959] ? __do_page_cache_readahead+0x236/0x940 [ 645.203090] alloc_pages_current+0x155/0x260 [ 645.207509] __page_cache_alloc+0x67/0x80 [ 645.211664] __do_page_cache_readahead+0x27e/0x940 [ 645.216605] ? read_cache_pages+0x6a0/0x6a0 [ 645.220939] ? lock_downgrade+0x740/0x740 [ 645.225100] ondemand_readahead.isra.0+0x514/0xb60 [ 645.230042] page_cache_sync_readahead+0xa6/0xf0 [ 645.234807] generic_file_read_iter+0xfbc/0x21c0 [ 645.239585] ext4_file_read_iter+0x14b/0x330 [ 645.243999] generic_file_splice_read+0x3a7/0x5c0 [ 645.248848] ? add_to_pipe+0x350/0x350 [ 645.252747] ? rw_verify_area+0xe1/0x2a0 [ 645.256816] ? add_to_pipe+0x350/0x350 [ 645.260709] do_splice_to+0xfb/0x140 [ 645.264431] splice_direct_to_actor+0x207/0x730 [ 645.266174] audit: type=1804 audit(1599311905.205:1085): pid=32017 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/557/bus" dev="sda1" ino=16298 res=1 [ 645.269101] ? generic_pipe_buf_nosteal+0x10/0x10 [ 645.269114] ? do_splice_to+0x140/0x140 [ 645.269123] ? rw_verify_area+0xe1/0x2a0 [ 645.269134] do_splice_direct+0x164/0x210 [ 645.310320] ? splice_direct_to_actor+0x730/0x730 [ 645.315175] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 645.320200] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 645.324964] do_sendfile+0x47f/0xb30 [ 645.328695] ? do_compat_writev+0x180/0x180 [ 645.333032] SyS_sendfile64+0xff/0x110 [ 645.336928] ? SyS_sendfile+0x130/0x130 [ 645.340910] ? do_syscall_64+0x4c/0x640 [ 645.344894] ? SyS_sendfile+0x130/0x130 [ 645.348877] do_syscall_64+0x1d5/0x640 [ 645.352782] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 645.358068] RIP: 0033:0x45d5b9 [ 645.361404] RSP: 002b:00007f4632d78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 645.369269] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 645.376539] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 645.383812] RBP: 00007f4632d78ca0 R08: 0000000000000000 R09: 0000000000000000 [ 645.391155] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000006 [ 645.398436] R13: 00007fff049bf73f R14: 00007f4632d799c0 R15: 000000000118cf4c 13:18:25 executing program 1 (fault-call:11 fault-nth:7): syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 645.411102] audit: type=1804 audit(1599311905.235:1086): pid=32017 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/557/bus" dev="sda1" ino=16298 res=1 [ 645.439783] audit: type=1804 audit(1599311905.265:1087): pid=31979 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/557/bus" dev="sda1" ino=16298 res=1 13:18:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/205, 0xcd}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f00000003c0)=""/204, 0xcc}, {&(0x7f0000000500)=""/41, 0x29}], 0x4, &(0x7f00000005c0)=""/7, 0x7}, 0x4}], 0x2, 0x40000020, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000680)="1ff80f9836c15e291bf4f492bc82e941acf4ba69d712860d56d49a46569eb438d9349c2e4484c63c90383e1826c49f2f68435725c4f985f57cbf36e2fb78a02bd2b1", 0x42}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000bc100000000000000f000000000000009500000000000000ac3071823d79719ebe76ca47ac7d81fbe98141f314aa18ee5844f7d60ec72c5a4e227426032b60949b668e6c0495898952768026825f8b1f4dd05cc042b1f496f0aaee47360b49aee7ec277c1822480c9968da2d29caacdd3e44205394d489d53bb42f9c4d17c3ad6bf9666c1ca0a0e951229d755d2c5760"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 645.624119] audit: type=1804 audit(1599311905.565:1088): pid=32030 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/558/bus" dev="sda1" ino=16291 res=1 13:18:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="390000001000090468fe07002b0000000100ee0020000000550001070300801404001800120014000e04000020000300000002000000000000", 0x39}], 0x1) [ 645.666754] FAULT_INJECTION: forcing a failure. [ 645.666754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 645.716126] CPU: 1 PID: 32032 Comm: syz-executor.1 Not tainted 4.14.196-syzkaller #0 [ 645.724143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.733505] Call Trace: [ 645.736106] dump_stack+0x1b2/0x283 [ 645.739834] should_fail.cold+0x10a/0x154 [ 645.743997] __alloc_pages_nodemask+0x22c/0x2720 [ 645.748767] ? __lock_acquire+0x5fc/0x3f20 [ 645.753017] ? security_inode_alloc+0x8d/0xd0 [ 645.757549] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 645.762411] ? __do_page_cache_readahead+0x236/0x940 [ 645.767532] alloc_pages_current+0x155/0x260 [ 645.771947] __page_cache_alloc+0x67/0x80 [ 645.776107] __do_page_cache_readahead+0x27e/0x940 [ 645.781044] ? read_cache_pages+0x6a0/0x6a0 [ 645.785378] ? lock_downgrade+0x740/0x740 [ 645.789541] ondemand_readahead.isra.0+0x514/0xb60 [ 645.794480] page_cache_sync_readahead+0xa6/0xf0 [ 645.799243] generic_file_read_iter+0xfbc/0x21c0 [ 645.804020] ext4_file_read_iter+0x14b/0x330 [ 645.808440] generic_file_splice_read+0x3a7/0x5c0 [ 645.813291] ? add_to_pipe+0x350/0x350 [ 645.817194] ? rw_verify_area+0xe1/0x2a0 [ 645.821258] ? add_to_pipe+0x350/0x350 [ 645.825151] do_splice_to+0xfb/0x140 [ 645.828873] splice_direct_to_actor+0x207/0x730 [ 645.833555] ? generic_pipe_buf_nosteal+0x10/0x10 [ 645.838405] ? do_splice_to+0x140/0x140 [ 645.842384] ? rw_verify_area+0xe1/0x2a0 [ 645.846452] do_splice_direct+0x164/0x210 [ 645.850608] ? splice_direct_to_actor+0x730/0x730 [ 645.855462] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 645.860484] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 645.865245] do_sendfile+0x47f/0xb30 [ 645.868968] ? do_compat_writev+0x180/0x180 [ 645.873301] SyS_sendfile64+0xff/0x110 [ 645.877193] ? SyS_sendfile+0x130/0x130 [ 645.881185] ? do_syscall_64+0x4c/0x640 [ 645.885162] ? SyS_sendfile+0x130/0x130 [ 645.889142] do_syscall_64+0x1d5/0x640 [ 645.893036] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 645.898224] RIP: 0033:0x45d5b9 [ 645.901414] RSP: 002b:00007f4632d78c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 645.909128] RAX: ffffffffffffffda RBX: 0000000000027980 RCX: 000000000045d5b9 [ 645.916401] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 645.923672] RBP: 00007f4632d78ca0 R08: 0000000000000000 R09: 0000000000000000 [ 645.930944] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000007 [ 645.938212] R13: 00007fff049bf73f R14: 00007f4632d799c0 R15: 000000000118cf4c 13:18:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2002a480}, 0xc805) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)=0x6, 0x4) clock_gettime(0x6, &(0x7f0000000480)) select(0x40, &(0x7f00000004c0)={0x80000003, 0x1000, 0x101d, 0x7fff, 0x9, 0xfffffffffffff800, 0x1, 0x20000007ff}, &(0x7f00000003c0)={0x5, 0x7d3c, 0x56d, 0x2, 0x1, 0x4b, 0xffffffffffff7a9e, 0x8000000000006}, &(0x7f0000000440)={0xc, 0xfe, 0xffff, 0xfe, 0x2000000000000206, 0x9, 0xfffffffffffffff9, 0x633a}, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x2c942}, 0x8000) ftruncate(r3, 0x40001) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r2, r3, 0x0, 0xffe4) socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0xf101, 0x4000000000db) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000640)={0x1003, 0x10001, 0x127, &(0x7f0000000780)="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"}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000540), &(0x7f0000000380)=0x3c) r6 = socket$inet6(0xa, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendfile(r6, 0xffffffffffffffff, &(0x7f0000000240)=0xf101, 0xc00) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000580)={0x1, 'sit0\x00', 0x5}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @aes128}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 645.971818] audit: type=1804 audit(1599311905.685:1089): pid=32040 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/464/bus" dev="sda1" ino=16305 res=1 13:18:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/174) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000002c0)="0f090f017e020f30f30f090fc72e8f00baf80c66b85e67af8e66efbafc0cb8bb94ef66b87746bf570f23c80f21f86635000090000f23f8ba200066ed66b96308000066b870a9000066ba000000000f3066b9800000c00f326635004000000f30", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000240)={0x8, 0xfffffeff, 0xd2, 0xffff85e3, 0x8c4, 0x5, 0x1}) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0) 13:18:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2002a480}, 0xc805) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000080)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca3\'\x12xY!\xa4\x9c\x97\xf1\xfc\xb0\xe8~\x91\xd5\x04i}\x03\x00@\x0e\xe6\x995b\x00\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000280)=0x6, 0x4) clock_gettime(0x6, &(0x7f0000000480)) select(0x40, &(0x7f00000004c0)={0x80000003, 0x1000, 0x101d, 0x7fff, 0x9, 0xfffffffffffff800, 0x1, 0x20000007ff}, &(0x7f00000003c0)={0x5, 0x7d3c, 0x56d, 0x2, 0x1, 0x4b, 0xffffffffffff7a9e, 0x8000000000006}, &(0x7f0000000440)={0xc, 0xfe, 0xffff, 0xfe, 0x2000000000000206, 0x9, 0xfffffffffffffff9, 0x633a}, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRESDEC], 0x3}, 0x1, 0x0, 0x0, 0x2c942}, 0x8000) ftruncate(r3, 0x40001) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r2, r3, 0x0, 0xffe4) socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0xf101, 0x4000000000db) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000640)={0x1003, 0x10001, 0x127, &(0x7f0000000780)="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"}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000540), &(0x7f0000000380)=0x3c) r6 = socket$inet6(0xa, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') sendfile(r6, 0xffffffffffffffff, &(0x7f0000000240)=0xf101, 0xc00) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000580)={0x1, 'sit0\x00', 0x5}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @aes128}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 13:18:26 executing program 1: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000000080)={0x0}) r1 = syz_open_procfs(r0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x58b64873, 0x7, 0x4}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) close(r3) openat$cgroup_subtree(r2, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r3, r5, 0x0, 0x80001d00c0d0) 13:18:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/174) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000002c0)="0f090f017e020f30f30f090fc72e8f00baf80c66b85e67af8e66efbafc0cb8bb94ef66b87746bf570f23c80f21f86635000090000f23f8ba200066ed66b96308000066b870a9000066ba000000000f3066b9800000c00f326635004000000f30", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000240)={0x8, 0xfffffeff, 0xd2, 0xffff85e3, 0x8c4, 0x5, 0x1}) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0) [ 646.413968] audit: type=1804 audit(1599311906.355:1090): pid=32030 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/558/bus" dev="sda1" ino=16291 res=1 13:18:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:26 executing program 1: r0 = syz_open_procfs(0x0, 0x0) connect$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xa0000000, @loopback, 0x6}}, 0x24) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 646.675463] audit: type=1804 audit(1599311906.525:1091): pid=32078 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/11/bus" dev="sda1" ino=16300 res=1 13:18:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/174) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000002c0)="0f090f017e020f30f30f090fc72e8f00baf80c66b85e67af8e66efbafc0cb8bb94ef66b87746bf570f23c80f21f86635000090000f23f8ba200066ed66b96308000066b870a9000066ba000000000f3066b9800000c00f326635004000000f30", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000240)={0x8, 0xfffffeff, 0xd2, 0xffff85e3, 0x8c4, 0x5, 0x1}) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0) 13:18:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/174) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f00000000c0), 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000002c0)="0f090f017e020f30f30f090fc72e8f00baf80c66b85e67af8e66efbafc0cb8bb94ef66b87746bf570f23c80f21f86635000090000f23f8ba200066ed66b96308000066b870a9000066ba000000000f3066b9800000c00f326635004000000f30", 0x60}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000240)={0x8, 0xfffffeff, 0xd2, 0xffff85e3, 0x8c4, 0x5, 0x1}) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, 0x0) [ 646.900265] audit: type=1804 audit(1599311906.785:1092): pid=32094 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/559/bus" dev="sda1" ino=15990 res=1 13:18:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000300)="896f99be89f0894d6e8dd0c14899ff223287d0ff2fdc5f8f6dc70127ce75a1c52d1b07657a80b45fbf3cd5bcee803bec35e232b134420a08314f6680c243b6f97aad29b265e8ad645d0e9ef5af79e94a1f8510c7661381be38a1552b62bbd6ce2f2599941c7cebcdb51a70701e07995efa9bd6b9bbef64e7251476639199cffe4b27902356da111e45887cb1034b4314b6c28e42ca280b0e3fb6b4a5ce93e2f80aaa5ae565a33005385f4e0b1a9e7026e91f645458b3fc9da4b4f2", 0xbb) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000140)="26c7cfd70a43876c027b94af8e9d8ca8266454dcc963000b553e03572415d3cd8d486dd6d53a41fa9dde4385143ba9cce4ee2ae91c207385938adb6e4d874257dea28006ccf304000000700e072d", 0x4e}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:27 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='cgroup2\x00', 0x10000, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 647.441920] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns [ 647.524167] audit: type=1804 audit(1599311906.895:1093): pid=32104 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/465/bus" dev="sda1" ino=15997 res=1 [ 647.528968] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns 13:18:27 executing program 0: r0 = syz_open_procfs(0x0, 0x0) connect$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0xa0000000, @loopback, 0x6}}, 0x24) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 647.680219] *** Guest State *** [ 647.683784] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 647.692954] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 647.701921] CR3 = 0x00000000fffbc000 [ 647.706042] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 647.712131] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 647.718429] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 647.725352] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 647.733864] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.742280] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 647.750552] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.758861] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 647.767151] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 13:18:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e) [ 647.775637] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 647.783902] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 647.792030] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 647.800480] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 647.808846] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 647.815544] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 647.824052] Interruptibility = 00000000 ActivityState = 00000000 13:18:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 647.830491] *** Host State *** [ 647.834415] RIP = 0xffffffff8116622e RSP = 0xffff88801b43f9c8 [ 647.840764] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 647.848705] FSBase=00007f695c13a700 GSBase=ffff8880aeb00000 TRBase=fffffe0000003000 [ 647.856882] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 647.863162] CR0=0000000080050033 CR3=000000008e4b6000 CR4=00000000001426e0 [ 647.870516] Sysenter RSP=fffffe0000003000 CS:RIP=0010:ffffffff866018c0 [ 647.878000] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 647.884417] *** Control State *** [ 647.888157] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000eb [ 647.895251] EntryControls=0000d1ff ExitControls=002fefff [ 647.900974] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 647.908245] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 647.915289] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 647.922286] reason=80000021 qualification=0000000000000000 [ 647.929284] IDTVectoring: info=00000000 errcode=00000000 [ 647.935003] TSC Offset = 0xfffffea239d31a48 [ 647.939533] TPR Threshold = 0x00 [ 647.943192] EPT pointer = 0x000000008f6e001e [ 647.947848] Virtual processor ID = 0x0002 13:18:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65cbfea075b238e1b22c69dbff02fdaca36406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a7796cbf7c1dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d294c05bda71e34216bc85765a86d7410aa6e4d849125b4cdacf427e95f5d83db3743dba723e504b2ced3ea1b8e6128ecfad34a9e26a84bd3e4657824472e4e0cff841b5b9fa623eb1af5206f987a210db2d1738e19d3434a44c2cbb18026e987ca7f9023d686d59663d0132e4d190ee6cb3beb0089b99803e1f4fb1e6d2476a647719d715f0a1403059739ff57767819978bc167aa4eeec6c9c3b6b41284f33636167c01efdeb4565bb9b5c3bc7870805a542f15fcf08900a16207460f00fa9429ea75f7f28acebcbb5816a7dada544ece6cf816018f8158aca8f008141a4cedea097980", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:28 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000240)=0xc) prctl$PR_SET_PTRACER(0x59616d61, r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) openat$cgroup_subtree(r2, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200002) sendfile(r3, r4, 0x0, 0x80001d00c0d0) 13:18:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x0, 0x2}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:28 executing program 1: syz_open_procfs(0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000240)=""/126) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = openat(r0, &(0x7f0000000140)='./bus\x00', 0x10000, 0x104) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x60, 0x1, 0x2, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffffc}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10001}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 13:18:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1a5e000000000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0), 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:28 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000640)=0x8, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000480)={0xfd, "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"}) r3 = syz_open_dev$vcsa(&(0x7f00000005c0)='/dev/vcsa#\x00', 0x4, 0x40060) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc0\x00', 0x2800, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000240)='./file0\x00', 0x4, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)="f5660f6b8bea3ea3a2894c9c060a78f2783ea262ed81980d880a511f1ec402eb8721d64b98858831603fe37477b919b461822f1509aebb73dfdf0055f063bb9f", 0x40, 0x81}, {&(0x7f00000002c0)="a981f7b442d0f69b7d39050aab8e82138929b62d80a254ba358ef42894cd7f6d8d8485e3a51681ac5c9f1d0eb16e5a00901555d96b98c9c45e40133a3d34f43aea27830420ca66b9c4b66d8f71ff8641d095f6d6169a952ba13745d0423da2fae717f91c423bebe9b0445f5f4f022719653ad215fcc2a6b453a7c58549f7fbdbddfa9b32f5cf63513d0375afb43fb4193d8456a271b19a03ab339993edd7466cd67ed5d681b64795e1612cde2615b72b179641b5e64ab8e6ded482270981316ec40288ee6b974aab26fcb564456b453026d6eb73626c6e45275159297af21a5a15772e5b7ae3eaea46895101c6bc", 0xee, 0x2}], 0x400, &(0x7f0000000880)=ANY=[@ANYBLOB="73697a653d2d252c687567653d6164766973653d232d5c235b2c73697a653d3037361b2d312c687567653d6164766973653d405de52c687567653d6164766973657032002c736d61636b6673666c6f6f723d6367726f757032002c7375626a5f757365723d2c7065726d69745f646972656374696f2c00fcdb7457d5cdb584bda22538fd41861d12e233131201dbeb1686577e96bf6d44079d0b67ebf88271d439ad7f066a0022d0c3167dc6b70aa87a743bbbbfca9eda4d71809f31343e04f344a56e8de6a0f6a3d7bc7503380465d81b699dcc951fbec05018bbc84f1f9352726dc6b2661300698e73d58f042700e74ab74ddc33528de365f453de"]) ftruncate(r4, 0x200004) r5 = accept4(r2, &(0x7f00000006c0)=@generic, &(0x7f0000000740)=0x80, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 13:18:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000003f40)='veth0_vlan\x00', 0xfffffffffffffe3b) socket$nl_route(0x10, 0x3, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)='./file0\x00', 0x8, 0x3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x14}, 0x8000) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x8001) getpid() fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x1, 0x8000, 0x7}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4005) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x8}, 0x16, 0x3) write(0xffffffffffffffff, &(0x7f0000001740)="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", 0x1000) sendmsg$inet6(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="7cb88a5882a22da9e95566a23c8e2c88660713839f1e0574c06e63a9f22e89a2e1d0405ecece414e0be891f69be4b86bcbc972a209f09cf0517d05b5ecf6d56a50824eba3f39313a30f9a11f38cb4878d6248d34a0e862696c41e8f5a72ff6c92106e79380edccaec2e6640c323b51bee64ecf67bf75e914401841e3897a57bb18467a890858099bd69c9e97af42a3231716e516d7a6537336681843f73341071bc576005ddfd4419920dc924b5b1f322ececd2465125dc4c844cc105fdc30973c96fe3c125f1b0237d497dae8820980a67882aa2ed349f9a3a1f6351f8afb2f851c2e92c5f2491a6aea11d8e1820cdfe6a268f5f49d41d4528e5cede81865bc1cfed80a14a6a0ae78efe6c873ba72ab78308406e0059fb3476c2d8ed9653c2fccb61e1fef5c7c792607bfec3287320f262235da1d34c31546da8bb58d12df0f3640bfd63a656e247061eceeece250f57ff2576b6aec8866d6f4f45ebdd9ddf06a83114b769f22c44f31bbabfdcecb55d9aa4f67ad9a4a7da921323844f0def7a342df610012e6119fdcc9d6963a09372cbb1d6da293631d3dd14b9a7f418dac6f003ebead3cd4dd31893ddf6b8bf22c4aefa990f3ab6bcfbe9cec0e2ef24cd49ded9c2ef2440305a881ccf1b0e869146eb9f2dd4a489a394dc6f4417164d631130cb00b2b0329e9cbe10f5ee5a9d6c82d410e6dc85f1ec47a3273ce33895e606e3a7721678eeef34a1d565881eb63f8997ced5e809859e99f08fed45ea68cb912b65e718cfd00565911a93bf531520c34b872def71b0372d92a888f2b44b7fa2470e3cca087d72f33de189e01799b06395b7347e14dfc06e1137d91788f1fcdae094ada0d989572bc3d9631ecea6243f77e06b06a7c13e232b3dbadd98671ac2619081e36eee956663a18ce1dfd5ba9c015e5e9519c02378ea491b5cd6ba45ab97b765ca6d3ce9417def08365c8b963d1fc34dfa60fa5401f197fe50e625413323283297ec0592eb622a91f4980b032226c545ca3dc59441ee964566b08a3815be842fa3554e371d6ec5da3831488ed47f92288b27e775f52e324069126b1f18da4426c4c9ca1b7e556c4be2953bc8c2f3c5fdc34c552b737172eb534b182a08f98b8ffbe9c9a90be37e3e7576726333195618c45d5f6a4f74f46c8c5f161d729634b37d140356e5cea02691237239e9d8c65d86ae25b29bd90cc01b76636b805126588ee81fb75f6c7dbf04bea3b98fe330f2bdfad4bdcdeeacc6f96291a2ef9169df60de6f53aeaf2a00d340c9698ce5bf42552f9032f30f1f0a6e0fc0d92ea80ec204ebfc073997b927d981e61234c11e7e1482f3aa4890b3cae5d43b924e6e248ab7ec8d4f571dac57cb3d9b72ebe819930c4c83e024fe85bee102877547502ce556f8aedf820e7c0fb90753fd03d7856e48e997120422186dde411c1f7ee86b7cfc4865ca9e990c290928352fbe037353617b86b5f54d265f3b076275979cc6b512137cafa390409de9e9dc6f0598175034858d6e856b278544b2d993a3fe2a08c906ebfc28507ae2b729bb98f1838d01397ef05afa1cfb835f3709892d814adcd6659d5a64713e84dec1b5fd034f270e521476b9a7ef49c3997d8a34e4f5ca49c28e003a4ee8825c1a0e8364fe76cf594121058ce647282cb51ec06ba08b22795ad2929370e4990f21f7c0246ed5ec8cd6d4bc6a286160c0b0db8eb102d97ebf579dda1f6e11f3d2998bf86b1a2ed92b22792ab07a84c889f032586dd47c69fd01fad1ea43d67b678eb6cd138695bec20f171c27c9db19d8d6735cff84cb3d4fdb85c2e88ff32a5eca59e7492f322655edf69c67bc26875d1f2e797852e6461b3f671e62281fdf1af7461a94ac6ce280e2d7b7be9e49d5a74e6411f21d99c7caa572bcaacd5b456fc68d41be033626a520b08ce12a5aa0e4051238c47335ba41daf38a7ea06668ee289affdc7cf38f1e193b9110dbe75c91dfe6ebbee68edf22f82bcd729d261dbf3a0be0cd5e3b0e9ea721f85faf43450eab301bf5fb232a4c6d5477fb5b966dc9403758aa3466e8b92770952e7c7da4a48595634075852e6b64f68c0bc6a610758f54850ea433dc2cba2c4ba80e0ad8fd353b2ee80c740e39f991ccd95fa485abcab99bd54383cecf2ca23dd4f962e0d9774f9febcb8567b3ae0b2e55bf7302f36abc8581b0933941d2cf200b7943be0022f5fc25a743ccee427b45e385688e529aaaa155506c894257b3574350bddeb02d7ebb51f4d942397991b749bd0a599ebe925125c9a2f810a44c94c0cce5b913b0d29cb0966eb312ed967b1b7a2683aa0c4a41f6d7e6891bcd51b98fbbc6b5a3e59b00877933a8912185eb34a12c75467bac45e1570ddf03a8759a52edc4ab5272139f94bb7843d795832e10a02a360c3866d90d89782463cb6daf72085729cd0059b0763b7f43cf1ec4db09afaaf283663b92669fac93807fdbb033eb0069a9f3099969f46e8d9ebaba568a909056f2fbc8901d5edbcd5f6b0f2eb31087c14aba8b254c60760d1991bf35aeb9827212d13773fec1a8023e986a6556c72043b3dee97d985b3f5280efbcee8e2d7d26579c2b610654707eef577d2bc0784de27e84e30885d1ca698b4d29ad9b29dc256d76ea8231f7b39b515095b97114d6e320020b91e5e0f6f2c396672524b3f734837d981bcbf2ccc4a11989fe37320173a2c875b294dd1df1b882ebb3e1af9ae1bcea003fbcf45bc48b78d944798e86c3c3aa9dae637b1ec88486652057ae232471dfb3d1a2dad21d74881274487b410e3b2e713b4c4333c9ff5755dc5fe871355257f0263d69ba9d6cfaafd5b6e0fc4cc27a41fa78f56edf8bac4d5e5d59f8cfa3b5d3c6f7a502fd24b0b30a05ddd5af022317ce8b3089183aa3d2fa7a597e510172133569b3492f349a26eda22c6e26f7a84477f983e013773514663bfcd7a5c31853f811dc376c0cad2b54fc98f66a6b82bb037d8a62ba788124468b650df9ad3820b85c099089862d7b0e96fe0ab59cbd06d64dc75f77495c8eeb68f427da4dec979d52891a48c592b672ae7871f7678969cdc30fbfab071c5f7d739fc0540e4d69db13016660497bda2f149f7e4b1f2ba552348646953e2d20230173d81582560bb36806733f6cc12b35ed4d6746d5447c6468018df50b0af33dfe6f0efb1a8570680322cc5f875110d59816ae152aed68879f71125bcef2d5e486d35642b87ec0335176c472880136903c12054b31c75568826fe8da92b7dec3ba2003e1d768fc25480364ecd398535502d1734b516b328970e8f7184df965208d5d2ee18d333abb17a617608342e548413c668198dcb1cdfc7059c616c703b5e59cefe9562412d8524947c21577afd757132648a4386d6d18c216aa2b456329b819602d96c420f597f5d98e0fa3b1d5a29937eba9375a2ff881dbab28728144901b9ec99382ea7022338eaef274482fe5c1724ee8f155ffacdd7ae1bd73296558f0b4dbb1f9bdd749e82197f5c3d6a137d86708179df7e1946f0946c5d3f64ff9d471eac47d60486724d62f1e84f92a7fffe2a1c380480545211484d27305027533085aff2b2d157bfb35adc4a8375f730da719ed462d23be604f4908ed219e3e6f46772af598f833648d5d52b52c273f0b3e3f00489438688bcd64443974a34d7406c59351816ff32b766412fddf2c118999f16bdf3db3a07675a31cc0a132a23a0c0a477c93a962ff7d8e86c9d10983cb3be21c7de2ae18db517265f8722a20d56437cac77dc72061f15b4452230546264067d5eb4c2a89780940c32409edd28a3efb03fd3f7c0c2fedd85853d78ddd9675fa4c4e9657fa84fdf72026bad384f3bb2f7719b9a2093d67011f2871b05363b64188c8c00bae995f6ae474bf4f956fa2a4e4bf2b4a7abeb7ced98c5694b86bdbe9643e4b334816dfdd4b7df27cca3053f0ef3d5b5b16bb916e00aca22991e37e1776a47d519bb28063caf4cb38c34b23297ff8f9953a21afac0a24231edb95a62bcba769f109c169886855e31a963e0648c470b0a76b34db54b5650f0cc9eb9921b2fbd920d115773556f8e255ff67cc42702c028f3a64e8fda45360dd54a7853dd19cd526194bca0036659d8b3987ad034b08933aa18dc8351ac94d84fba410c592fd40eea0278a3f44b982b0526517cd9b009653c0a0e89c93a87c5b2a391bc7c7b5cb2bfc55f6049f5c09cd1acd8fdc1e6f26f8a14247037ecffe11e6ab3c6f67d486c2741fe79246724239d9c3815d15b9ce57f188276f1ea65a61d8cd4b4bec4eef23dc4659e0416ad0f6a057256f7c5eae6d76d6c5c251939de84e3c7f4ce2452d0838819d4ee12a11fb1a56cf3011348bc749bd4a76379195f3113a434ab767ea9df43378658000641ce35d806aa92befc125dff0781d6180531a78dfc9d90c8605c87fb9bdc7ca67743fd246885cd001551c16b34bdd8e4855639671b9989d5fb0ff79bde1ead5f19f4cab1eb0336a85188aa6a92cc5628ccc9667c6bd5bef410bc67ee20c7e8f6c9af8f269a417145d441a168b9d2d23d59439fc6673acc8c446da3644056d44eb1e95364353346b6f2e1b69e47cde60559d9846bf9c5a010d4fd402c4bd0be0ea2ee74ad30726d59ba734757b2be4697798601a2b573861d447dffac8ea8328942cfc07c84f491bcaeb43ba2ea23418e8be9d264171be02b6a8f264cde5e91c6712dc096bf6569be726359f82bc7762ea755ec0a857f8e1302a5099283efaf6e12b62b3df37f9e2b2554cbc0251f1e6952c78cf36e498e45f37e7f5bd4be61fde4a837e79cef73467acb169edca5a69e40967bdf9bd3cda31ad179c8a7e3098c71b9086cfe1a2922289e29f25c8160de4cd24e2c6da579d6b9ed9e42f0172a88d230a9cb08b3e0c86ac3091c3a7617d9c367682242caff0353e59814bd2960f79d4fc064ed69faf47febbc333f858ce224fb61a7414e019818879e57a1ae26bfb9f15355a0aa4ed4bbecd9c47df865975e5d3081065f477c44bcecea4cfd57729da0d77e7c667dec594e8c8876c92ff73ce6607df90050437b74149bebdfe4de5f37c1cf26fe0d4fb57eb49783ca5e72e4dce1878c3cadd6e6b362d31d92ec99cc438e01dbe11b74921a2880836d54568b9e8ae0fcb86d9068e9b969c43bcc2dd4573ae2eb3434751c60eadc80edf84082c8702bb6c04143c902e5ea8cee46c550e5036ee0af1b8917b5a6212c21fd69bd845e3c187598d2026cd5b04a5c87a1ad82aa55d7006375e816eda6c4c62f2fba79bda568987b4125f2bfa5f8b71c8f1dc08bd1a810cb15551550cdd2960de64dd6b7dbfd763ff60377869b51ede4a5d6eead4caa77f75220c2f23123f8d7f3881f6ebf2a5e9f5f9022dbf98b65ee2e47ed84cbc278a51cbde525a6bd1e3bb0b53c663fb848f3c159fdb3ccde4a18e0e08f4a96b13fb7432532125c69d2e53db7e3a2bb94c60fe14df6aa006742d90161598912fafa96674a2d0b1491642a6520cee5447562fe5ff191c7b628b5f797254c1b0fd58d741b45a38ba48c06c95816a6bb52fecb609e0443adc93b11b3696d425e2f901f7fb3a723fb10b2021ded1b3cef89ee6ec21d2f21482910db8f0f1fe9c252bcb6a0be27cd2cfbcf69c6d9693976199e654657f46871c16525c414d8f1615a94dbdff50d3b909b4a9e555c26989f27a475b3e5e6ceddf8b1db227ea05643b6f6279967952d69e31cb2cc3178241b1bf2234db040bf05e2484d80a92332eb76720b260a229a3e166fa23eb295af10c695c27bf90156fa", 0x1000}], 0x1}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ab8000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) 13:18:29 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000380)=""/77, 0x4d}, 0xfffffffd}], 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)=""/242, &(0x7f0000000340)=0xf2) r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x1, 0x501200) openat$hwrng(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x1000) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000200)=0x6) read$dsp(r2, &(0x7f0000001180)=""/102354, 0x18fd2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000400)={"eb97329807784bad8d59459811ba4488", 0x0, 0x0, {0x8, 0x80077}, {0x5, 0x8}, 0x9, [0x200, 0x5, 0x7, 0xae8e, 0x401, 0x6, 0xffff, 0x100000c7, 0x4, 0x3, 0x69ff, 0xfffffffffffffff9, 0xe55, 0x81, 0x1, 0x34]}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000015c0)=0x19, &(0x7f0000001600)=0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0xfff) preadv(r1, &(0x7f00000017c0), 0x1a7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x220, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0xc081) 13:18:29 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001800012c000000000000000002000000001c0006000000001c0016801800030014000000fe8000000000000000000000000000bb0400150002"], 0x40}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x79d, 0x100, 0x0, 0x7, 0x5, 0x7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 649.252070] tmpfs: Bad value '-%' for mount option 'size' 13:18:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="5dac4e7720892aff01000000000000b63c72a2c49913157c00006b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e0390e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b73dc991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990eae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfb105bbed427010f9e19842285924d4adda6de6093fe13db7ea50f30b6fa9673d29000000000000000200000000001ed8596d11eb1ce840210e4c7cf06ec856809d1f9874b6e848d81071ded216fba79ee64ffc5ba125d1d30d", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:29 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) ioctl$FITHAW(r0, 0xc0045878) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 13:18:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:30 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000380)=""/77, 0x4d}, 0xfffffffd}], 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)=""/242, &(0x7f0000000340)=0xf2) r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x1, 0x501200) openat$hwrng(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x1000) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000200)=0x6) read$dsp(r2, &(0x7f0000001180)=""/102354, 0x18fd2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000400)={"eb97329807784bad8d59459811ba4488", 0x0, 0x0, {0x8, 0x80077}, {0x5, 0x8}, 0x9, [0x200, 0x5, 0x7, 0xae8e, 0x401, 0x6, 0xffff, 0x100000c7, 0x4, 0x3, 0x69ff, 0xfffffffffffffff9, 0xe55, 0x81, 0x1, 0x34]}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000015c0)=0x19, &(0x7f0000001600)=0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0xfff) preadv(r1, &(0x7f00000017c0), 0x1a7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x220, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0xc081) 13:18:30 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x80) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:30 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18}, 0x18) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xd4fa3fe959b9ad8}, 0xff7f) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000200)={0x100000, r4, 0x9}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="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", 0x1e5}]) [ 650.274192] kauditd_printk_skb: 19 callbacks suppressed [ 650.274201] audit: type=1804 audit(1599311910.215:1113): pid=32232 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/468/bus" dev="sda1" ino=15887 res=1 13:18:30 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x7fff, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, 0x0}, 0x200000}], 0x1, 0x10003, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, r4, 0x2) mkdir(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 650.510967] audit: type=1800 audit(1599311910.265:1114): pid=32236 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=16306 res=0 13:18:30 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x113a42, 0x15) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 650.642679] audit: type=1800 audit(1599311910.275:1115): pid=32236 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=16306 res=0 [ 650.699537] audit: type=1804 audit(1599311910.535:1116): pid=32210 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/14/bus" dev="sda1" ino=15936 res=1 [ 650.782047] IPVS: ftp: loaded support on port[0] = 21 13:18:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='(\x00'}, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES64=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 650.999969] audit: type=1804 audit(1599311910.795:1117): pid=32223 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/562/bus" dev="sda1" ino=16314 res=1 13:18:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:31 executing program 1: syz_open_procfs(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000280)=0x28) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x800, 0x10001) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f00000000c0)=0xca4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0cd) [ 651.685424] audit: type=1804 audit(1599311910.975:1118): pid=32287 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/563/bus" dev="sda1" ino=15878 res=1 [ 651.731115] audit: type=1804 audit(1599311911.105:1119): pid=32285 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/15/bus" dev="sda1" ino=16319 res=1 13:18:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x1291c2, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 651.857637] audit: type=1804 audit(1599311911.135:1120): pid=32289 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir046460605/syzkaller.ZkCXzK/597/bus" dev="sda1" ino=16307 res=1 13:18:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862ca792bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621300bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1ff0000000777d151ef9ba14d05fad8b28e749a4bb29240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1cd657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x18080ffffff7e) 13:18:31 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x151140) fgetxattr(r3, &(0x7f0000000240)=@random={'btrfs.', 'cgroup2\x00'}, &(0x7f0000000280)=""/163, 0xa3) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 652.455392] audit: type=1804 audit(1599311911.445:1121): pid=32302 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir297428485/syzkaller.h3wF80/176/bus" dev="sda1" ino=15884 res=1 [ 652.841030] audit: type=1804 audit(1599311911.715:1122): pid=32316 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/469/bus" dev="sda1" ino=15882 res=1 13:18:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3d}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x145) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:33 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000380)="770bbedf12e336bb3cf24bd2c5ff04c4385b50231c1eb042145e477962a8d3f6ddd583d778bff7eaf416333038c90f6598bc9e6f541b8cb037d94a2ca4bde9180ef32e975e07c5a2041b5f3516a5990d597785", 0x53}, {&(0x7f0000000400)="da74fdf68e9ea62a6cf1fdfca8e4e4670796ed73d8e15ba55078a811ad5a1be75c179b84ad52cb52bf5b13d99536c8d56963f91dc7268ed74c104288caadd297ab715977492164b8c077ad4accbfb5fc6376f02ee5cfce7a6f0aaeabf29825b5a09b6c8486790ca97f9aea4d1cc59673c0672f3ab5ffb322a4cab9c34186813ca5317ec6767bd957e90dd75428cd22cd47b65bd1e9758ebb357cd846833c03df5a3c736dc7c08a2ef44b790e4116384282cf56844826b046afe202f1b5a8abe3c5851c91aa20d7", 0xc7}, {&(0x7f0000000500)="ef6f977b2cd423c664fce640938f95ccbe16020bf1534f7e5c8d3e018865beae235c8092093c22a39746eaee3dfe39fcbc2c684891bfb2840545f9abce3648dc262a3fbed9b8fc7b03ab43406e96ecef2dc797a763bbb3b6fe09fc5467aff53c0cb138d952ad316f16578f17d810934567c1fdf48379deea8ec15745d92ec3b8431f1f607b859eb7", 0x88}, {&(0x7f00000005c0)="2a2fb3dfa37c1fe1497ff583e2b45adeab9ed71499e6a898a30825cc73e7c7a05f14763b240d769efa45fdf9b4635b9e573967412037e27bc872eee16fcbff09284d177eda55560cde56cc4b7a21b4b68ec5892366f00bf24fdc63a686c324ada563b7ebf69444", 0x67}, {&(0x7f0000000640)="1cf07da53ed954e5fab4f323190651fc907b951f3435818c0664f853f8bcf0085f809f9410ba1d1e80bc8ac6e0ed08961cde18f8feaddbf751d3f8f33f02653badce595500e4e41bc451b1087b0c7b2bc77aee", 0x53}, {&(0x7f00000000c0)="bfaad3fa8037774d5bdc89fa11da4b24a6e9428cc9c4b09f", 0x18}], 0x6) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={0x0, @null, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @default, 0x7, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) write$fb(r0, &(0x7f00000002c0)="a0ec6b32dc9795cdb3060b17dfefe00d4e27e20471967dbf40877e3e6ab0c6cf099a29dbf9ecb0700016d34b5b1bd89b6a91a5738b50dd7f6686f3fc2b64a139b41f7b6c28b787eb6ca4c99a8043b1d23d26f0487fb8b589a97e326a58e5a450fb67317332accb9f60c72c86b13fdea22cbd0248cb48193ce3aefbd6e8540bbf496e434116159b54e498cf9917a4d76c2fa4b3cb094c588c33ab7bceabbe36ddec2cf5fa22d6068b2b8ac879a2209df5c96d", 0xb2) 13:18:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='(\x00'}, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES64=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:34 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:34 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x321501, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x3, @pix_mp={0x80, 0x22f5, 0x56544943, 0x2, 0x1, [{0x0, 0x1}, {0x7, 0x3}, {0xfffffffa, 0x4}, {0x9, 0x5}, {0x1}, {0x80, 0x3ff}, {0x80, 0x81}, {0x9, 0x8}], 0x7, 0x0, 0x0, 0x2, 0x4}}) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d4) 13:18:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10, 0x0, 0x5, 0x0, 0x0, 0xdd1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:34 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x12}) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) 13:18:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r3, @ANYRES64, @ANYRES32=r1], 0x20, 0x4810}, 0x0) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) ioctl$sock_ifreq(r1, 0x8947, &(0x7f0000000300)={'sit0\x00', @ifru_data=&(0x7f0000000180)="8ffb166f73d644089ebf2c1a0f277c9823258459b5a48716ae7be495d3d385fc"}) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$key(0xf, 0x3, 0x2) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='(\x00'}, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES64=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:34 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x141042, 0xa3) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) ftruncate(r2, 0x200004) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x202040, 0x0) sendfile(r1, r3, 0x0, 0x4c) 13:18:34 executing program 0: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x12}) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) 13:18:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:35 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) execveat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000280)='cgroup2\x00', &(0x7f00000002c0)='cgroup.subtree_control\x00', &(0x7f0000000300)='cgroup.subtree_control\x00', &(0x7f0000000340)='-*&-\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='$$1[\x00', &(0x7f0000000400)='\xfd.^\x00', &(0x7f0000000440)='$}$\xc3.}[#/(\x00'], &(0x7f0000000580)=[&(0x7f00000004c0)='.#*%\x00', &(0x7f0000000500)='\xf5!\x00', &(0x7f0000000540)='cgroup2\x00'], 0x1000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f00000000c0)=0x8, 0x4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:35 executing program 0: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x80) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 655.395355] kauditd_printk_skb: 18 callbacks suppressed [ 655.395371] audit: type=1804 audit(1599311915.335:1141): pid=32439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/566/bus" dev="sda1" ino=15888 res=1 [ 655.427143] audit: type=1804 audit(1599311915.335:1142): pid=32439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/566/bus" dev="sda1" ino=15888 res=1 [ 655.461172] audit: type=1804 audit(1599311915.365:1143): pid=32439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/566/bus" dev="sda1" ino=15888 res=1 13:18:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43020079236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a2e9ed862cac92bef3d138f1ea3a06b36c5ec66c01adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c000000380821cfbb75d44d5e0000a22a00c0803866ce209d8bc22f93fb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693847410848ca704ca5df250f961514366e10fd959cd563121eebc569b30b5ae7ac8fe7ebe424bc2e001241aa769cda43d3c1f3662d8e34b9d6767b48", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:35 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x40000) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = accept4$ax25(r0, &(0x7f0000000240)={{0x3, @default}, [@remote, @remote, @netrom, @rose, @rose, @default, @rose, @rose]}, &(0x7f00000000c0)=0x48, 0x800) preadv(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000480)=""/171, 0xab}, {&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/48, 0x30}], 0x5, 0x2, 0x1) r3 = open(&(0x7f0000000080)='./bus\x00', 0x101441, 0x0) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 13:18:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601000000000000000000000000000e0003006269746d61703a697000000005000400000000000904020073797a30000000001800078009000600000000000c0011800800014000000000050005000200000005000100060000000a19bc43b3b0a044a4197f3ed48eec496930ffad37d778f1c07babe8633634fcb863580f7fc1b81b842c83f0c6ab2621d88c55520226580511e7f6d58110feb7011ebcfe320e19d1ed88422a6b5c76482fc0a82b63dbd1c914f43a413537d1a63741b279d0b602c7308e6f92"], 0x60}}, 0x0) [ 655.766425] audit: type=1804 audit(1599311915.705:1144): pid=32448 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/472/bus" dev="sda1" ino=15852 res=1 13:18:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000013c0)=""/4093, 0xffd}], 0x1, 0x6fe6babc, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x218, 0x0, 0x0) 13:18:35 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f00000000c0)) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000240)={0x4, 0x2}) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 656.010668] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 656.023157] audit: type=1804 audit(1599311915.735:1145): pid=32460 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/567/bus" dev="sda1" ino=15856 res=1 13:18:36 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x42c02) io_setup(0x1, &(0x7f0000000180)=0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fallocate(r0, 0x3d, 0x0, 0x1000f4) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x2, {{}, 0x7}}, 0x18) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x6, 0x29, 0x0, 0xffffffffffffffff}) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000002c0)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xd4fa3fe959b9ad8}, 0xff7f) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000200)={0x100000, r3, 0x9}) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 13:18:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff1b6}, 0x0, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x88}}, 0x4841) close(r0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000040)={0x4007, 0x9, 0x8, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) getpeername$tipc(r2, &(0x7f0000000000), &(0x7f00000000c0)=0x10) r4 = open(&(0x7f0000000080)='./bus\x00', 0x149042, 0x0) ftruncate(r4, 0x200002) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 13:18:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 656.287671] audit: type=1800 audit(1599311916.225:1146): pid=32476 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=16351 res=0 [ 656.393953] audit: type=1800 audit(1599311916.265:1147): pid=32476 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=16351 res=0 13:18:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xa8}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) membarrier(0x63, 0x0) 13:18:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x20000000}, 0x10}, 0x78) [ 656.529291] audit: type=1804 audit(1599311916.465:1148): pid=32490 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/567/bus" dev="sda1" ino=15856 res=1 13:18:36 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) r0 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000240)=""/117) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="080100000b060500000000000000000007000007200008800c0007800800084000000000100007800c00028008000140ac1414bb500008800c00078008000a40000002e10c0b40000000090c00078006001d40000500000c00078006001d4000000000100007800c000280080001407f0700010c000780080008400000000105000100070000002000078005001a000000000008000a400000ffff0a001100aaaaaaaaaaaa000054000880180007801400170076657450305e766c616e000000000000100007800c001b400000000000000000100007800c001a006367726f757032000c00078008000840000000040c0007800800094000000004050001000700000067ecaf49532df13fce9b4f74887ef5b476f16102eec28c73dd001b18c7225bb1b907183ca87d07d602eb4e4961fa15f1ff5ca57cd7d0f76e7ee2c9352277dcf79bd9e964450600000000000000ce419b9bb36bf16ece8fe40fe5de59a8fb11dc8f1d311d8c397261481fd8c4daf5302a96298af5d72e68354d0ccd6cb78397bf9e5e1302df4ec0e6db932fee822c27d20721dd3ac83b0f04a3d0667a0f80a5e55b96068538bfe98fe1b2d6514ccdc329bd9f79b6c6904bb6bcf8574a4726d96962df045da38267de42ed5c14df8c3b0a1c16413c58cda5e0647aa254c64dfc7b483105e13ca8da5e0c65a1bd31c3fe5c8c0feafaf49bcbb3375c1036acdd0efa7ba001e2976bbe43e04a641ca10bd2fa1584d6d34bcbb6d1eefd5102b8ad4b1f9d614411ebaf51f1380a3cf9139d3274fa751c61e6cc4b8d45d52c05173d70abbc0e7f945248527237a44627931d3c282db8705c31815aa6735e1c5bd5fb0000000000"], 0x108}, 0x1, 0x0, 0x0, 0x4000055}, 0x840) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r2) fchownat(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0xee01, r2, 0x1800) r3 = socket$inet6(0xa, 0xa, 0x1) close(r3) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) 13:18:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000180), 0x55, 0xa) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"00000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a100", 0x1000}}, 0x100e) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:36 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0xe0003f01, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000ff20fd3cb79cf544af5b7417a77300f9180200ee00e000da34e6542a7e004a69d50fa53703ded81458106fe8b90002000100000000000000030200044af70300050000000000022e0b362654b6080c4a5bb1cf5960f82eab2a5afe4b547e993c1bcdbc3027835b9e1a827860ed8325ca09af23e90a72c2bdbae112da839a34b701124296d2686b64f1c9f1143ddd12ef1eb56b3032a23c50ec646e03846a46a963439d7ef982a0f62b2bf5c674891508e92c71534b4beb8d0260a056915059f4af496328807ddb4431e165e74170"], 0x60}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) writev(r2, &(0x7f0000000080), 0x10000000000000f8) 13:18:36 executing program 3: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x207, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) semop(0x0, &(0x7f00000002c0)=[{0x0, 0x0, 0x1800}], 0x1) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') setns(r0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000300)={0x0, "0eab139613a8b4029ea835dfff7ed142"}) [ 656.673040] audit: type=1804 audit(1599311916.495:1149): pid=32489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/567/bus" dev="sda1" ino=15856 res=1 [ 656.838463] audit: type=1804 audit(1599311916.515:1150): pid=32460 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/567/bus" dev="sda1" ino=15856 res=1 13:18:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="001001001800e001000003177869e1212934fc56927ef2fef47d60e074b973b87cd1359b1cdb2d1eb3f3df00f47fd16dd91968cf9a5924356c15c948a58fa01ff297de9a"], 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000180)={0x0, 0x3f}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000100)={0x0, 0x1}) 13:18:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xdd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800) write$ppp(r1, &(0x7f0000000100)="cd531f37ee1c4cbd7af3d90e96a5f96509061515a786855ed7821cedd58771a15097a5d33db9dbabafad797a06da2e32e38d4d237edf1662d6dcf6e55e72aab3f55c8c2183db34426fc397f7a4583e0d53b75cab6b9006c142696d9f93736aaddb9ec3c2d303f36088faa97e6033f8c6c9cf330dfc76af990d5f734e66e33e9af770acd18ce29ef96829ffcf08f435466a0d06fcea6f44c50660368beafc8a9be0acd575d83d5d48b73d58fa9ca0a79ccb78b0ad781ce3a0b4cf1b55da98985db08bf4bc029c24f038e64eb25d23595067697de4459f7133788ec05fc98f631d31f3381b412b", 0xe6) 13:18:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:37 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x963}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x896}, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="e7000404", @ANYRES16=r4, @ANYBLOB="a41d4313d6753b3ffe5d1fe546f2250c000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x40014) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r4, 0x39a989f66edc1f2b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x8004) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) 13:18:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x9, 0x0, 0xffffffffffffffff}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYRES64=r0, @ANYRESHEX=r1], 0x38, 0x4810}, 0x4801) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x480800, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d293cd280a04eceac39246d9871740dd69aae633bb9dde28383a5f1b260dfead710a997f9a03523ea857bfb9a54dab3907f896e6a991d39c418ccc0433a7cfd06bab675f2aced0bce808380737895c8eea5b7bd2b79456a5fcf33022ad5f7cfc490f52f192d265a37d00ac9f188e21e4c8978d6009843e07e4274d38724ebc9cf949a3e2d1f0e970a40b64fdac4e4dd52571e9796326a713a9f7783a77476a1e338848ab2d04b9491c733e41f82ce11d0b459ee361e06a106b33ffb861404bf602c6310e812c9bc4301bd099fe1bb", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:38 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb13663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c96575d7fb184f9ae38dc0c99c0", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) creat(0x0, 0x1) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) creat(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000dec000)={0x6, 0x4, 0x338d, 0x7}, 0x2c) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100c00}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x1, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x8005) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000c88000)={r1, &(0x7f0000847f95), &(0x7f000089b000)}, 0x3a8) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000240)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') ppoll(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 13:18:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a3000000000050001000600000015000300686173683a697020706f72742c6e6574000000000500052606d53bd8584015000a00000c000780080013400000000000"], 0x5c}}, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x4000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000100)={0x2, [0x0, 0x0]}) 13:18:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) 13:18:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES16, @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000640)={r1}) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000680)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) tkill(r0, 0xc) wait4(0x0, 0x0, 0x0, 0x0) [ 659.739365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 659.763592] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 13:18:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000400)={0x8, 0x2}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)=ANY=[@ANYBLOB="0006d90800000069cbdcc0b085263e359bfd3ea5b1ddcf9a7cf9ae7cf630aa70f44563ee6be4f77c5ada1bfb140b58b42781055949"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee304f7c00000000a2a300", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0x417, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x3}}}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xa0, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) 13:18:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)=""/246, 0xfb, 0xf6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x3, r0, 0x8, &(0x7f0000000040)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) exit(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000240)="520af9810d2eaab8368a1bba959748381be99487464ba7a3edd39220a5efbe2847cae8a1019d60a490f3c1ee6f25387f1c5faec8b245648e0dc5528c083d737626242e421416efeabac84748e1e210c3ecff9c7345315b0781a158b36831d0ed476ae6852de04d0a0cb86b7b7e3784985770c7ff5d399614f808a28e9f6481948dce4b6fdfee2970b49a80921277bda4317e6fc5c5933aeaa88bc9bb1d817124a41d3d2ef8fb78b4ba853c38d8ac4b41edc7c18435ef36c14ec8b9a5a31deaabf8040c76e7fcb6159fba4c63d3798e927c23f4c236e69ec703cf404d874d6d77112adad225eabec94a757d12a0aed5bab6", 0xf1}, {&(0x7f0000000140)="82455d25747871653da0de542219", 0xe}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000340)="eebe13738e193ebef702be643fdb286b98ff58f0cd632331d9dd0d1780e80a4386bdc6d9ba1180163c528a9cf78ec092fe1e7412490ebbc2103fe51f2764372e3a5ebd4cb2ae231bc5e72c3ea0241b10e584d2b7d21c192b489922081c27a32da838594bed06f45a4ac7fbbfc52aa9ecf65f160fd6620c31deeaf70f258214b8ae1d4a04b867f2a83c8f9dee57452f4735cfbdbe530322d020558799dccad7a0085a7194e74808054ab21686f8d862b18a8fb87875d0031a24c1122f90d9ee", 0xbf}, {&(0x7f0000000180)="b6589e4e241e5d5f2934dd9dfa0e705660af052312cb6d2bdd19f9eaf591f52eb8537823aacbc930c404ae4455b1f6cb9854771e8d1d182e5a0d3a74eef9987e85ab7c5b4873a6665b173cc220579b1ece33e7b3f55c5c34069d88cd6e4f6d2b0a12343d12850385", 0x68}, {&(0x7f0000000400)="68547d16f2364ac3d11d868d5c21fded286b2fd2d15217d7", 0x18}], 0x6, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}, 0x4000000) r1 = socket(0x0, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)=ANY=[@ANYBLOB="c5ccdc95ecdab128ab6abaf5f5017dcccdc30100f80f944478c50ca75213ab00a62b8674853650d5b487d2a33962cf0400"]) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x7}, 0x90) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000007c0)={r2, r3}) 13:18:40 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010069910000000000000000000013000300686173683a6e65742c6966616365000005000400000d00000900020073797a30000000000c000780080006400000000405000500020000000500010006"], 0x58}}, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xffffffffffffff43) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x151) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x80000000]}, 0x8) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000200)={0x2, r4}) [ 660.605755] kauditd_printk_skb: 21 callbacks suppressed [ 660.605764] audit: type=1804 audit(1599311920.545:1172): pid=32660 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/22/bus" dev="sda1" ino=16327 res=1 13:18:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x20008) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x3) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368fcbc6eeb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 660.750956] audit: type=1804 audit(1599311920.575:1173): pid=32679 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/22/bus" dev="sda1" ino=16327 res=1 [ 660.811730] audit: type=1804 audit(1599311920.585:1174): pid=32647 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/22/bus" dev="sda1" ino=16327 res=1 [ 660.903308] audit: type=1804 audit(1599311920.845:1175): pid=32703 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/572/bus" dev="sda1" ino=16326 res=1 [ 660.939759] audit: type=1804 audit(1599311920.875:1176): pid=32705 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/23/bus" dev="sda1" ino=16327 res=1 [ 661.015267] audit: type=1804 audit(1599311920.945:1177): pid=32707 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/477/bus" dev="sda1" ino=15810 res=1 13:18:41 executing program 3: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getxattr(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000100)=@random={'osx.', '-@\x00'}, &(0x7f0000000280)=""/97, 0x61) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x7) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) removexattr(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000001c0)=@known='trusted.overlay.nlink\x00') [ 661.637628] audit: type=1804 audit(1599311921.575:1178): pid=32711 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/23/bus" dev="sda1" ino=16327 res=1 13:18:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8f, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0xfffffffffffffe04, &(0x7f0000001c80)=[{&(0x7f0000000900)=""/4085, 0xff5}, {&(0x7f0000001900)=""/150, 0x96}, {&(0x7f0000000340)=""/17, 0x11}, {&(0x7f00000000c0)=""/50, 0x2d}, {&(0x7f0000001b80)=""/231, 0xe7}], 0x5}, 0x2}], 0x2, 0x120, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$isdn(0x22, 0x3, 0x3) fcntl$setpipe(r4, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x363) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)=0x3e2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000580)) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8080040) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 13:18:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20, 0x4000000}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:41 executing program 4: prlimit64(0x0, 0x5, &(0x7f0000000140)={0x2, 0x8b}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ea74ae2f53ff8e03b0e0430983b91dd290135dc755db90600b256b1c587e72b6e07b3d77d8b334c3bf77c977574deafe3f077552b9f749914a7405ddefa18f3e9bb71d2bb4bcf0c3cd5570fcd0c52930300b5c414ba6797c8e093fd76dfc78ffc0978cd30dfdbcc6f456139493e43964ca83d8b7b32cc0b68957fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9c99842285924d4adda6de6fa3e8b17a3dc9c3247aea9673d2900"/306, @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x41fb, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x5d2483, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000100), 0x1) [ 662.002975] audit: type=1804 audit(1599311921.935:1179): pid=32742 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/478/bus" dev="sda1" ino=16325 res=1 [ 662.231525] audit: type=1804 audit(1599311922.105:1180): pid=32739 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/573/bus" dev="sda1" ino=16134 res=1 13:18:42 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)={0x3c, 0x7, [], [@pad1, @ra={0x5, 0x2, 0x4f0}, @ra={0x5, 0x2, 0xe59d}, @calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0xfff7, [0xfffffffffffffffe, 0x1ff, 0x100, 0xffffffffffffca4d]}}, @ra={0x5, 0x2, 0x8c}]}, 0x48) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x1) 13:18:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8f, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0xfffffffffffffe04, &(0x7f0000001c80)=[{&(0x7f0000000900)=""/4085, 0xff5}, {&(0x7f0000001900)=""/150, 0x96}, {&(0x7f0000000340)=""/17, 0x11}, {&(0x7f00000000c0)=""/50, 0x2d}, {&(0x7f0000001b80)=""/231, 0xe7}], 0x5}, 0x2}], 0x2, 0x120, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$isdn(0x22, 0x3, 0x3) fcntl$setpipe(r4, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x363) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)=0x3e2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000580)) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8080040) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 662.812865] audit: type=1804 audit(1599311922.755:1181): pid=32759 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/573/bus" dev="sda1" ino=16134 res=1 13:18:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@int=0x5, 0x4) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x11}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) 13:18:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0, 0xffffff9a}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x600, 0x0, 0x3, 0x8}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x11}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) 13:18:43 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000306010100000000010bfdff1d000000070001000600f2ff9b000780180001808000000000000000ff0000000000020000001c0006000442000000000c00040000000140acdc14aa140017007665746800000000616e000000008000050007008800000014001700767863616e3100000000001b020000000900030000007a32000000000c001b4072dcf77b001980000c00148008200140ee0000a5a00000000004028aab860000000000000000322a3d9cbf3d090002"], 0x1}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x8, 0xa, 0x1, "b93a06a8df74dbbd5c2c4d6e249cd9093d3ddd7223d69b6e1601b1314e332f5c", 0x32315258}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r4, 0x0, 0x883715, 0x0) 13:18:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:44 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0x8) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = userfaultfd(0x100000) write$binfmt_elf32(r2, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x81, 0x3f, 0x3, 0x264c, 0xd42793b64c371b62, 0x6, 0xcd75, 0x335, 0x38, 0x397, 0x7ff, 0x5, 0x20, 0x2, 0x48e8, 0x8000, 0x7}, [{0x5, 0x5, 0x2a, 0x3ff, 0x401, 0x5, 0x68, 0x5}, {0x6474e551, 0x81, 0x3, 0x7fffffff, 0x10000, 0xffffffbe, 0x1ff, 0x24}], "cc5a7b275708e0593ad57ca1fcfc5a8d33553bcab27174e34911ee4a95c0568c139e8b49ea64bd90d8697e37a16484e2d3bf7a01bb561948ce00bb7e5475946e952dc2dfb082225118297b64465248888bdb600bf8f922777a07b398e6300206c2720d37f8f416f8791c290927629480aed0102d06e413ed9e7e67c2ccdb64fa00"}, 0xf9) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[], 0x208e24b) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', 0x0, 0x2, 0x0, &(0x7f0000000780), 0x219001, &(0x7f0000000e40)={[{@disable_sparse_no='disable_sparse=no'}, {@disable_sparse_no='disable_sparse=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@dmask={'dmask', 0x3d, 0x80000001}}, {@gid={'gid', 0x3d, 0xee01}}, {@errors_recover='errors=recover'}], [{@smackfsdef={'smackfsdef', 0x3d, 'cgroup.controllers\x00'}}, {@subj_role={'subj_role', 0x3d, '}#'}}, {@obj_type={'obj_type', 0x3d, 'cgroup.controllers\x00'}}]}) pselect6(0x40, &(0x7f0000000140)={0x9, 0x3, 0x5, 0x2, 0x6, 0x6, 0x7f}, &(0x7f0000000280)={0x80000001, 0x3, 0x9, 0x0, 0x7ea, 0xdf7, 0x9, 0x81}, &(0x7f00000002c0)={0x8, 0xc1, 0x3, 0x5, 0x3, 0x2, 0x800, 0x401}, &(0x7f0000000440)={0x0, 0x3938700}, &(0x7f00000004c0)={&(0x7f0000000480), 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 13:18:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0xfffffffffffffd9d, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:44 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x1, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 13:18:44 executing program 3: ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x5000, 0x10000}) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x214000) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000180)={0x2}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000001c0)) r2 = syz_open_dev$rtc(&(0x7f0000000200)='/dev/rtc#\x00', 0x10001, 0x10000) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000240)={0x28, 0x27, 0x14, 0xd, 0x1, 0x6b, 0x5, 0x78, 0xbde378ac27912893}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000280)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x400, 0x9e, 0x2, 0x10000, 0x3, 0x3], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KDSKBLED(r4, 0x4b65, 0x1) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000440)={0x8, 0x120, 0xfa00, {0x4, {0xffffffff, 0x3f, "c9ae192356e23fb3d322690ae76fc93d9d6dd0e143928288a2973aacbbdc28623b4e6eb6caf647bc867e9d223df8a58f987175342375e0ebda03b0fd88e0fb100391f342c18ae5e53701e9dacbea97e0300111373d961e03f8711b33bab0466fc37d91594b54270047afd796bb770dace1c4fcf99dc4133e3f701b3e03694ddccf11784233a4923a8ad5f20d7321aa34e80faf8edb35c22cbe118279141987afb9d0b4317eeb25feae9f56c653f5a1434853aa8a168891c99161b575f99940886b41f338a8474d96f6c76c46a208afbd8948babc2b6e49b19f8b52986fb388f244150e49dca584392e87db66995f37e8138defaecef158f793464c42ca9f4d14", 0xc0, 0x1f, 0x0, 0x80, 0x4, 0x0, 0x5, 0x1}, r6}}, 0x128) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000580)=""/18) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$VIDIOC_S_FBUF(r7, 0x4030560b, &(0x7f0000000640)={0x35, 0x0, &(0x7f0000000600)="380f3fa2c57c4248393aeb9c16d1f8cc290a9a7f4877236569605e7bd16b967e47", {0x100, 0x5, 0x30314247, 0x9, 0x7fffffff, 0x4}}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000680)=""/134, &(0x7f0000000740)=0x86) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000000780)) 13:18:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0xc1) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000104ff24265ed210194c42b9b3f74c0000000000fdffffff4279440f97", @ANYRES32=0x0, @ANYBLOB='\x00a\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="08ebbf0be8557c000000004b46778c27018fe07728dc0300efff6cb6e96454832e50f8d2d9cb4526857e0f5cca18cb56"], 0x28}}, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@map={0x18, 0xa, 0x1, 0x0, r0}, @func, @map_val={0x18, 0xf, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @exit, @jmp={0x5, 0x0, 0xd475ab1c6ca01cab, 0x3, 0x7, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x0, 0x3, 0x0, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x0, 0x6, 0x3, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000100)='GPL\x00', 0xd2f7, 0x54, &(0x7f0000000200)=""/84, 0x41100, 0x7, [], r1, 0x1b, r0, 0x8, &(0x7f0000000140)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x0, 0x496c, 0x4}, 0x10, 0xffffffffffffffff}, 0x78) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) sendfile(r2, r0, 0x0, 0x20000000000000d8) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000400)={0x6, 0x8}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x2e7, 0x0) 13:18:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000104ff24265ed210194c42b9b3f74c0000000000fdffffff4279440f97", @ANYRES32=0x0, @ANYBLOB='\x00a\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="08ebbf0be8557c000000004b46778c27018fe07728dc0300efff6cb6e96454832e50f8d2d9cb4526857e0f5cca18cb56"], 0x28}}, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@map={0x18, 0xa, 0x1, 0x0, r0}, @func, @map_val={0x18, 0xf, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @exit, @jmp={0x5, 0x0, 0xd475ab1c6ca01cab, 0x3, 0x7, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x0, 0x3, 0x0, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x0, 0x6, 0x3, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000100)='GPL\x00', 0xd2f7, 0x54, &(0x7f0000000200)=""/84, 0x41100, 0x7, [], r1, 0x1b, r0, 0x8, &(0x7f0000000140)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x0, 0x496c, 0x4}, 0x10, 0xffffffffffffffff}, 0x78) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) sendfile(r2, r0, 0x0, 0x20000000000000d8) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000400)={0x6, 0x8}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x2e7, 0x0) 13:18:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b62139213bcbd101104eac562367fbb9f32b6430b29960c00000003000000a22a00c0803866ce209d8bc22f9307d417a1adddfb420777d151ef9ba14d05de8bbec2306aae1c14e75fd8a3631e693846410848ca704ca51b1c", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 665.658807] kauditd_printk_skb: 15 callbacks suppressed [ 665.665980] audit: type=1804 audit(1599311925.596:1197): pid=402 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/27/bus" dev="sda1" ino=16328 res=1 13:18:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000104ff24265ed210194c42b9b3f74c0000000000fdffffff4279440f97", @ANYRES32=0x0, @ANYBLOB='\x00a\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="08ebbf0be8557c000000004b46778c27018fe07728dc0300efff6cb6e96454832e50f8d2d9cb4526857e0f5cca18cb56"], 0x28}}, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@map={0x18, 0xa, 0x1, 0x0, r0}, @func, @map_val={0x18, 0xf, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @exit, @jmp={0x5, 0x0, 0xd475ab1c6ca01cab, 0x3, 0x7, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x0, 0x3, 0x0, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x0, 0x6, 0x3, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000100)='GPL\x00', 0xd2f7, 0x54, &(0x7f0000000200)=""/84, 0x41100, 0x7, [], r1, 0x1b, r0, 0x8, &(0x7f0000000140)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x0, 0x496c, 0x4}, 0x10, 0xffffffffffffffff}, 0x78) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) sendfile(r2, r0, 0x0, 0x20000000000000d8) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000400)={0x6, 0x8}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x2e7, 0x0) 13:18:45 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0x20000000) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[{0x40, 0x6, 0xfc, 0x6}, {0xcf, 0x6, 0x7, 0x3}, {0x5, 0x8, 0x40, 0xda}, {0x6, 0xa8, 0x20, 0x7}, {0xe800, 0x2, 0x3f, 0x10001}, {0x400, 0x7, 0xae, 0x7}, {0xff, 0x4, 0x40, 0x7}, {0x7, 0x20, 0x2, 0x9}]}) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000040)) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x60350800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x690080, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cosgrVid:De', 0x0) clock_getres(0x3, &(0x7f00000000c0)) [ 665.960688] audit: type=1804 audit(1599311925.786:1198): pid=413 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/576/bus" dev="sda1" ino=15813 res=1 13:18:45 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 666.341572] audit: type=1804 audit(1599311926.266:1199): pid=430 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/482/bus" dev="sda1" ino=16329 res=1 13:18:46 executing program 3: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6486}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0xc090) r0 = socket$isdn(0x22, 0x2, 0x4) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) poll(&(0x7f0000000000)=[{r1, 0x2020}, {r2, 0x624e}, {r3, 0x2002}, {0xffffffffffffffff, 0x20}, {r0, 0x4103}], 0x5, 0x504) 13:18:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 666.566834] audit: type=1804 audit(1599311926.506:1200): pid=415 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/576/bus" dev="sda1" ino=15813 res=1 13:18:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236bff01690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec1511fadb2a301c55eb0316020b798a66d7ca1f3477368eb53cb9b663ec6621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x2, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4df, 0x0, 0x1, r2}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0xc1) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 666.762616] audit: type=1804 audit(1599311926.706:1201): pid=454 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/577/bus" dev="sda1" ino=16362 res=1 13:18:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0xc1) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 667.073996] audit: type=1804 audit(1599311926.826:1202): pid=460 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/28/bus" dev="sda1" ino=16363 res=1 [ 667.185051] audit: type=1804 audit(1599311926.916:1203): pid=461 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir297428485/syzkaller.h3wF80/200/bus" dev="sda1" ino=16366 res=1 [ 667.438423] audit: type=1804 audit(1599311927.316:1204): pid=478 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/483/bus" dev="sda1" ino=16165 res=1 [ 667.581290] audit: type=1804 audit(1599311927.356:1205): pid=471 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir046460605/syzkaller.ZkCXzK/615/bus" dev="sda1" ino=16161 res=1 [ 667.606824] audit: type=1804 audit(1599311927.486:1206): pid=485 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/577/bus" dev="sda1" ino=16362 res=1 13:18:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0xc1) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce20ddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e198422859d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x3, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000006c0)="c9e2d1fea9b1454963fddfb38aaa56dd790f59f509f51baf182920ae4db1458cf76580b038e02e9ef74afec33769add22642e815ce052c0b3b354db50efaced69515ad1204f1bce71b5f4a5428", 0x4d}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x9, 0xffffffffffffffff, &(0x7f0000000300)="9f98041ac89818afd94e874df56929f2c226cb1cfebff994b730b1f4059f70575049896260d37e5253ad48a8e86497a3ebc89307a2dc8e76da456e52fff0ec92ccef74b2e7ca979e60efc89682315242c20157623d1a6cc5bc26175ff5c9879ca67d9ecb9069ab506325084739770c3fb76f642307ee3c69a95e9c1d57c8d1e15d20f6e488dd8a9840f9f9fa6c163751a5db6f376f54c561cd", 0x83, 0x2, 0x0, 0x3, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x80, 0xffffffffffffffff, &(0x7f00000003c0)="7e8a6f27fb8964f29efc87cb7a0964871cee9d1a66e7bb4f279713e6b28165ef4f556777cd5c80143d1063297ad53df327270ebbb8491e4f6c2fc1858644a30fbff4ea88aa703a583c7dd5f60ed5c18f259d2a9b7cca56f0c621f64178de48e92646992ac8ea794ba1c692f77128fdba8928c4cde9b48ce5d393e5ae3e412305a7a642fbdf3fa06a78edaa580d1a947928de1d40d31af2b79d999e8ca9cf1c2e570c2c58ebd25b6426164361ece702672b051b93dc76b9e9560e04a89b89bf92e853d0d58318acd4d6d827a87bf323a19c060354a627db01", 0xd8, 0x914, 0x0, 0x1, r2}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:48 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:48 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000001240)={0x1000, "06e8008486000000c56ecd1ebed2e27a29c484048e47cdb0dddbcd5680f33305", 0x2, 0x14, 0x1, 0x1, 0x4}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0002000000000000000000000000fbff00"}) r4 = syz_open_pts(r3, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x1b0280, 0x0) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000001200)) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xd) read(r4, &(0x7f00000000c0)=""/156, 0x9c) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000001400)={"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"}) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000000)) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000200)=""/4096, &(0x7f0000000040)=0x1000) 13:18:48 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x218002, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x8, 0x92, "1d750010000000000008040000000000000008"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x8002) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 13:18:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xfffffffffffffeb8, 0x2, 0x0, 0x0, 0x3, 0x0, 0x8, 0xfffffffffffffffd, 0x2}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000001a0100008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa606ef6fd44323d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xfffffffffffffff6}}, 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x4) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x3}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100), 0x8080ffffff7e) 13:18:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PORT_SELF={0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x30}}, 0x0) [ 668.918066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 13:18:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) connect$nfc_llcp(r3, &(0x7f0000000400)={0x27, 0x1, 0x1, 0x7, 0x9, 0xfe, "1f3eeca84700c8720757855e3c55c07fb44fc66363de850d3d2c7616deba9581f49ba26fda93ef98a30cc9e6ca397594773e013c0c65f212e5c102eaf66d45", 0x1e}, 0x60) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(&(0x7f0000000100)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f00000000c0)=0x8) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000056", @ANYRES16=r5, @ANYBLOB="000329bd7000fedbdf250d0000000800050039000000"], 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x40) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x41800, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:18:49 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000000000)={0x10}, 0x10}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000200)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000012c0), 0x100000000000017e, 0x0, 0x0) 13:18:49 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(0x0, 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:49 executing program 3: perf_event_open(&(0x7f0000001040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000500)={0x12}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x10000, 0x0, 0xf000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x3, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000006c0)}, {0x0, 0x0, 0x3f}], 0x102020, &(0x7f00000001c0)=ANY=[@ANYBLOB="726f6469722c686173682c6f626a5f747970653d6f7665726c6179002c0900001d8000000000000000ba068a3d4cd27d4a37660f3dc4b6e22b6b06fbd87f54df4b92"]) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000640)={0x0, 0x2, 0x5, 0x81, 0x0, 0x80000001, 0x0, 0x5dc5}, &(0x7f0000000740)=0x20) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB="08000100", @ANYBLOB="0800030002000000080002ff"], 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x20000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) 13:18:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x8, 0x1) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r6, &(0x7f0000000140)="dac0f2b8f3267f70e3d3e773f702c3237c0d65170ba9e7cab3e1", 0x1a}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:49 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000280)={0x2, 0x5, 0x1, 'queue0\x00', 0x3ff}) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="2f6465762f6c6f6f703000a62a977dee0cb1303c72869a0cbc5c1e604f3c6097f54e0ef3a5223edb328a359e69eba9368e43121101000000f4c6946b79e30ecf0355a77a810bbd1e7b8e9fc5b5683a2cdaf5b3d34fb6d7607546424ea7d282fa5ca0fa26f44e9f92fa9cca4a447e189c02bedbeee93d634c78490d50e61182a729ca344dbfba1e2b1f178d"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='xfs\x00', 0x0, 0x0) syz_read_part_table(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0080, 0xc) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x20004000) pipe(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2f64c7762f7367300033983e614a4dd3f9eb7fdb5030ff89f4c3b77ef2631978a5c64e50adcf9060312952e1804002910900"/60], &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='selinuxfs\x00', 0x800001, &(0x7f0000000180)='/dev/loop') 13:18:50 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0xfd7e) write$rfkill(r2, &(0x7f0000000000)={0xfff, 0x3, 0x3, 0x1, 0x1}, 0x8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0x85) 13:18:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:50 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800e000", @ANYRES16=r4, @ANYBLOB="10002cbd7000fedbdf250200000008000100000000000c0005000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x854}, 0x8880) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}}, 0x4000) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d0) 13:18:50 executing program 0: setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x1}, 0x4) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xc2ac4cbf40787621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10002, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') r1 = getpid() tkill(r1, 0x3e) preadv(r0, &(0x7f00000017c0), 0x15e, 0x0, 0x0) 13:18:50 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="0b7f43f9097f25469248c45464c6789f5bce1f1408a3ae7896b7a63cf780e72cb2", 0x21, 0xbe3}, {&(0x7f0000000300)="4cc633747811e4aef010fb644b6d3c53f35a77656949ebe12ae6c038df89e518c8060e21287d", 0x26}], 0x210000, &(0x7f0000000380)={[{@nonumtail='nnonumtail=1'}, {@shortname_winnt='shortname=winnt'}, {@fat=@dos1xfloppy='dos1xfloppy'}, {@shortname_win95='shortname=win95'}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '%{&%][&./{-'}}, {@permit_directio='permit_directio'}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f0000001680)={0x1, [0x40, 0x5, 0x5], [{0x80, 0x100, 0x1, 0x1, 0x1}, {0xffff, 0x5, 0x1, 0x1, 0x0, 0x1}, {0x401, 0xa06, 0x1, 0x1, 0x1}, {0x0, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x8d1, 0x1, 0x0, 0x0, 0x1}, {0x7fffffff, 0x8d0, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x800, 0xfffffff7, 0x0, 0x0, 0x1, 0x1}, {0x10000, 0x6, 0x1, 0x1, 0x1}, {0xfffffffb, 0x5, 0x1, 0x0, 0x1}, {0x2, 0xb5, 0x1, 0x0, 0x1}, {0x81, 0xff, 0x0, 0x1}], 0x7}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x40000) lstat(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x1, 0x652, 0x4, 0x40000000, 0x3}, 0x1c) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000001780)=""/4097, 0x1001) 13:18:50 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes128, 0x10, "295a4d3642bebfd9"}) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 670.848888] kauditd_printk_skb: 17 callbacks suppressed [ 670.851708] audit: type=1804 audit(1599311930.786:1224): pid=633 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/31/bus" dev="sda1" ino=16379 res=1 13:18:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0x3) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRESHEX=r3, @ANYRES32, @ANYRES64=r2, @ANYRES64], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 670.965109] audit: type=1804 audit(1599311930.836:1225): pid=597 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/580/bus" dev="sda1" ino=16378 res=1 13:18:51 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x8000) openat$cgroup_procs(r3, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 671.020543] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 13:18:51 executing program 0: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v1={0x0, @aes128, 0x10, "295a4d3642bebfd9"}) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 671.123532] audit: type=1804 audit(1599311931.066:1226): pid=649 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/581/bus" dev="sda1" ino=15856 res=1 [ 671.285486] audit: type=1804 audit(1599311931.096:1227): pid=650 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/32/bus" dev="sda1" ino=16378 res=1 13:18:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x501341, 0x0) r4 = syz_open_pts(r3, 0x2a0001) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x84) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000300)) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140), 0x10) sendmsg$rds(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x80000000}, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x58}, 0x10) 13:18:51 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='efs\x00', 0x868, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee304f7c00000000a2a300", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0x417, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x3}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'nr0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x29, 0x7, 0xe1, 0x56e2, 0xe, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x40, 0x700, 0x5ec, 0x643}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000001440)={0x6dc, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x2, 0x6, 0x3f, 0x5}, {0x82d0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x6}, {0x3, 0x80, 0xf0, 0xfe8}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x49c}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xa6}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffff528}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8, 0x1, r3}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4ef1}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xab64}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x97}}}]}}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) openat$cgroup_subtree(r5, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d0) 13:18:51 executing program 3: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x8000) openat$cgroup_procs(r3, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 671.664026] audit: type=1804 audit(1599311931.606:1228): pid=677 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/487/bus" dev="sda1" ino=15956 res=1 13:18:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r3, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x9, 0x83c, {"ecf2dddc2a55e4d633697bbeb292883f"}, 0x74b8, 0x40, 0x7fff}, @in={0x2, 0x4e20, @multicast2}}}, 0x118) ioctl$BLKPG(r2, 0x40140921, &(0x7f0000001200)={0x0, 0x9, 0x60, 0x0}) unlink(&(0x7f0000000200)='./file0\x00') [ 671.874388] audit: type=1804 audit(1599311931.816:1229): pid=649 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/581/bus" dev="sda1" ino=15856 res=1 13:18:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)}, {0x0}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYBLOB="2f7d05ccde6f16ff4d69c1695476d155a06ff607fc525ec95765f523b48e738d0b84feddacf3cdc71ad27a8c23e67021f9a45338adbd6944b0bd62b761a15b7a9b7398fa46dc2a61568a9d19dddc5e17fa2cb47740fc139aafab4d9ae6b8358843100a6568f7c76a1d4b036d76edbdd8f47a06442e7a29d784e6cbb80e1b427262c057792c41fa0dd503cd9f51b3ed225ea693b5f6722cdddd12f22e294c927164efd5a81ec06463f6efcca993ac533f1ff8edca961c8b2f530c9b23f9eb6e1aa82a918145649b0d20bbe3426e5d93d08aa60442f3df15c54330c1d7ac19e2eb4e5d684f6b5579b68056af097a52dc8c67d5ab047ad2470b33721dad12b7b9"], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x4000050) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:52 executing program 3: perf_event_open(&(0x7f0000001040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xc, 0x20, 0x0, 0x0, 0x0, 0x5, 0x81bb2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x7, 0x10000}, 0x8202, 0x3f, 0x0, 0x5, 0x400000000000003, 0x1, 0x8}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x5, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000004c0)="3fd8a86118f952", 0x7}, {&(0x7f0000000980)="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", 0xfa}, {&(0x7f0000000800)}, {0x0, 0x0, 0x3f}], 0x102020, &(0x7f0000000780)=ANY=[@ANYBLOB="726f64697292d5ee82682c6f626a5f747970653d6f7665726c6179002c00"/39]) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000640)={0x9, 0xffffffff, {}, {0xee00}, 0x6, 0x4}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20040014) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000280)={0x4, 0x1}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r3, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b4940b521b6a238e3c4ad8aaf50c71b4eda0845e96c6f1a4b95135215b33bebcd52d2c8c10c2989b510bf0b2e2e1023adf69af88eb65891e54fc924d05f040d90cc24cc8e8c641a13163577024341c4b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', r3, 0x5e, 0x8, 0x1, 0xb2f2, 0x0, @remote, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, 0x8000, 0x80}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={0x0, 0x3728}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 13:18:52 executing program 1: r0 = syz_open_procfs(0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x420002, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0xc000, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000380)=""/174) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x80002, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000280)={0xff, 0x1, 0x0, 0xffff, 0x1}, 0xc) syz_open_procfs(r4, &(0x7f0000000240)='net\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2001, 0x80) openat$cgroup_subtree(r2, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) sendfile(r3, r6, 0x0, 0x80001d00c0d0) [ 672.130551] audit: type=1804 audit(1599311932.066:1230): pid=700 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/582/bus" dev="sda1" ino=15869 res=1 13:18:52 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 672.438845] audit: type=1804 audit(1599311932.116:1231): pid=704 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir046460605/syzkaller.ZkCXzK/624/bus" dev="sda1" ino=15969 res=1 13:18:52 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40046f41, &(0x7f0000000080)={r5, 0x7000002}) ppoll(&(0x7f0000000100)=[{r4, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendto$isdn(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="09400000090000009c1b00a3dd0c889508509cfaf3fdb3ffa2210376b4712dc4575019038b7eaf37c1604eadd72461e8d284288ee83d099482fe61679bc8baff5d4be83b9a420222db0978462bcf04332d38cddfca17a429099c94b45c468951291872ad6d8d9a685dd3be1a4acbad0b989de2a78aeeffab8714a18f322b7b6b035fdbbe5161fe39783a40b1f1749747a76de4a353898332c83a588f1d03beab7ea237612d752a5d52dddb338caf44769a047b81b80a88a5eed65b1769e1ed102264068cc4b8f5299680647b51370f2d93541ecb4e2b6500"/229], 0xcf, 0x40, &(0x7f0000000400)={0x22, 0x0, 0x1f, 0x25}, 0x6) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000240)={0x30, 0x360, 0x190, 0x4c0, 0x80, 0x8, 0x8, 0x0, {0x3, 0x3f}, {0x4, 0x1}, {0x9, 0xffff}, {0x3, 0x4}, 0x1, 0x40, 0x5d, 0x2, 0x0, 0x6, 0x100, 0x0, 0x2, 0x2, 0x0, 0x8001, 0x27, 0x200, 0x0, 0xb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) [ 672.522049] audit: type=1804 audit(1599311932.236:1232): pid=711 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/33/bus" dev="sda1" ino=15871 res=1 [ 672.782023] audit: type=1804 audit(1599311932.716:1233): pid=724 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/488/bus" dev="sda1" ino=15956 res=1 13:18:52 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000040)='cgroup2\x00', 0xa0004, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) syz_mount_image$cifs(&(0x7f00000000c0)='cifs\x00', &(0x7f0000000240)='./file0\x00', 0x9, 0x4, &(0x7f0000000400)=[{&(0x7f0000000280)="10", 0x1, 0x9}, {&(0x7f00000002c0)="d8616e7546f7547c4c3442122820b4e3594b0aded0de764db4c4", 0x1a, 0x1}, {&(0x7f0000000300)="6ec9fdbaf4936ca85d59eb6ff6a961683818cae637dbf01637e866b4dec7568580062067b877df89ce9cfb7ff6202625e6b2c580936e2fb6d16634c1752a7ac76caac1c1a6f4210b3a3a39de035f3ebe121240e6bf184611129cc7095f2cdbd7748f61898b2bcc69a19e289c3bce373960d285e10482e2229f44696bfbee21ccfee32fd686c9849b3e28ec34ee14a27101c4960442267bfe83a1a227d41e759d08cb961d9a78e8ff0dbabb85c1e7902a3083341e17", 0xb5, 0x8001}, {&(0x7f00000003c0)="287b82da1cd9d7cf5eb9aa082ee18e0b5773b0ed8b7d03d7c41f7468a823bce4222538281541c701", 0x28, 0x1}], 0x40, &(0x7f0000000480)='cgroup.subtree_control\x00') openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000004c0)={[0x10000, 0xf000, 0x100000, 0xd000], 0x3, 0x90, 0x2}) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 672.982220] device bridge1 entered promiscuous mode 13:18:53 executing program 0: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40046f41, &(0x7f0000000080)={r5, 0x7000002}) ppoll(&(0x7f0000000100)=[{r4, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendto$isdn(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="09400000090000009c1b00a3dd0c889508509cfaf3fdb3ffa2210376b4712dc4575019038b7eaf37c1604eadd72461e8d284288ee83d099482fe61679bc8baff5d4be83b9a420222db0978462bcf04332d38cddfca17a429099c94b45c468951291872ad6d8d9a685dd3be1a4acbad0b989de2a78aeeffab8714a18f322b7b6b035fdbbe5161fe39783a40b1f1749747a76de4a353898332c83a588f1d03beab7ea237612d752a5d52dddb338caf44769a047b81b80a88a5eed65b1769e1ed102264068cc4b8f5299680647b51370f2d93541ecb4e2b6500"/229], 0xcf, 0x40, &(0x7f0000000400)={0x22, 0x0, 0x1f, 0x25}, 0x6) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000240)={0x30, 0x360, 0x190, 0x4c0, 0x80, 0x8, 0x8, 0x0, {0x3, 0x3f}, {0x4, 0x1}, {0x9, 0xffff}, {0x3, 0x4}, 0x1, 0x40, 0x5d, 0x2, 0x0, 0x6, 0x100, 0x0, 0x2, 0x2, 0x0, 0x8001, 0x27, 0x200, 0x0, 0xb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:18:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x800, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 673.123883] CIFS VFS: Malformed UNC in devname. 13:18:53 executing program 0: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40046f41, &(0x7f0000000080)={r5, 0x7000002}) ppoll(&(0x7f0000000100)=[{r4, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendto$isdn(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="09400000090000009c1b00a3dd0c889508509cfaf3fdb3ffa2210376b4712dc4575019038b7eaf37c1604eadd72461e8d284288ee83d099482fe61679bc8baff5d4be83b9a420222db0978462bcf04332d38cddfca17a429099c94b45c468951291872ad6d8d9a685dd3be1a4acbad0b989de2a78aeeffab8714a18f322b7b6b035fdbbe5161fe39783a40b1f1749747a76de4a353898332c83a588f1d03beab7ea237612d752a5d52dddb338caf44769a047b81b80a88a5eed65b1769e1ed102264068cc4b8f5299680647b51370f2d93541ecb4e2b6500"/229], 0xcf, 0x40, &(0x7f0000000400)={0x22, 0x0, 0x1f, 0x25}, 0x6) r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000240)={0x30, 0x360, 0x190, 0x4c0, 0x80, 0x8, 0x8, 0x0, {0x3, 0x3f}, {0x4, 0x1}, {0x9, 0xffff}, {0x3, 0x4}, 0x1, 0x40, 0x5d, 0x2, 0x0, 0x6, 0x100, 0x0, 0x2, 0x2, 0x0, 0x8001, 0x27, 0x200, 0x0, 0xb}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 13:18:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 673.603603] CIFS VFS: Malformed UNC in devname. 13:18:53 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) syncfs(r3) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f0000000340)={0xc1, &(0x7f0000000240)="2852306eb5213ea0609a32d730614a84ea5884d4de6d6fd904bddbc9e00bff78d32c399600d55399045d1b2390a2d97a3c81813715ce47453b933eeae656a950afd76eb7e4eda387c6c54133d84897dc705aedad81989e9cd814f288b4c4f243cc1bcf2d19bbe9358b3b0e76045bb44a3954fcc9e92eb6f8d6bd58265f3a5d16883de2e37816bb0ebb5b73c5bdfd803b8474a08a5d17f5b93a9bc571d9069253a980bb2f95bd680f8eca7b03d7172cb9f19512b2c9a7dc2f240695766c3d124df8"}) [ 673.655388] print_req_error: I/O error, dev loop1, sector 0 13:18:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f000000000000014000005e43f13979236b8db37e9c7a6299838c627dc5cbaeda8248690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2bf8582db70000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3630000000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892ae795d1e57aef2dccb5909c460cdb13157c882f6b62532c183ee72454abe5dbc51727284f7acb07845aa0e679cb96cc8b5c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b040000003b91de290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84003d8b7bb37e0b68a77fc990361dbac79a2f71d8e01d73187deae43489f4c2ed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de609e083743ff223f6768029edf53f8b17a3dc9c3247aea9673d29ed53c47313d5278bb35d563f923b0e7e2395ee0be06f0e637e433d9d64d0f3122f60fa074d87be29ab457894c78f2c23ffb6ca5c565bbe0034b09038fb0d75a85879c7004fcd2c8ee8bca87100000000000000002057569654e3e0184572962b1c119fe3c8ac522917efcbc2a8a5cc4eac539b1b0a82c65288e72b42be4875d514c11a7a1858c5bdb004f96f67868a9c2e8c517738cdf39eed5562ffa2e8d6d7705eee6e32afd1f80ffda3384bbdcfea090ec465b6f8ff00303a197b964d40b7dca1b83d1594ce50b2d659affd89954e3b0d7ab1c075ce7c90f19a83f850d7ee9c07544674303778722e351dd88855add304ce4c571e1de6d455e33e1ec53c5dc7451f034683fe24c02caeeac3b9cf5778220ad5b3317b2979e164c0a7cd75d3e49e261301ffed24f39b59f5fb3b3cc4272a4110c220e113579de5c7635255421fa286c4b044d62f244b2bb8fdf2763240db1baeb67750562e84464a957a00b3714511caa03730c4f1a6259d83d3bbf78389652533710fff9175b0a1e7e1b77a8390546f", @ANYRES32, @ANYRES32=r3, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x20, 0x8001, 0x3, 0x5, 0x20000000010001, 0x1}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf7a06787a2deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcd49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de6458c5b3327de023f3efeec3f739df25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000140)="2ab68e2d868c400d01d06a7c8f7ce03f28aaed75f6a507d11fa7b1df04d540d3daa15635f1010000001c3af7fdfd", 0x2e, 0x0, 0x0, 0x5}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:54 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:54 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x15) 13:18:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:55 executing program 1: syz_open_procfs(0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0xb, 0x4ca800) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) write$P9_RCREATE(r0, &(0x7f0000000100)={0x18, 0x73, 0x2, {{0xc, 0x4, 0x4}, 0x3}}, 0x18) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x90000, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) openat$cgroup_subtree(r2, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ftruncate(r4, 0x200004) 13:18:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x1000, 0xbe0, 0x0, 0x9, 0x0, 0x0, 0xfffffffa}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000104000014000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800090004000000"], 0x3c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 13:18:55 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x8000, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x8000000000000000, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)='%', 0x1}, {&(0x7f0000000140)="0272f8e661d82e2f7a1924", 0xb}], 0x2}], 0x7ffff000, 0x0) 13:18:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) fcntl$getownex(r4, 0x10, &(0x7f0000000080)) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$inet6(r2, &(0x7f0000001840)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @empty}, r5}}}], 0x28}, 0x0) 13:18:55 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:55 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/212, 0xd4}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r0, &(0x7f00000017c0), 0x11c, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x0, 0x9, "1935c764fb5796c5789036d3652e09ac8ab775149e8ac041022d62c1b1a6897282656b9597672d455d754e5c4e2860e5c0a1a8f94731201f6d33df4b989b46c2b1a80143870e006c2baee18c4c0a863e76d781ced81c8e8a5be2191453da3949794d1b44dd930a8586e71ef3f1d8f3e73e32c410834e0ac6c92322e30b1492a906d411c0213b050c6f0fc5467bf0ee7320607c64b471f02c993cf17e2d1463bd72156b35a13b9ddbd2009887cb70d32e815cce997ce383f2ae41425e041833e5efb5a0565ef6141b38c8f52f314e39ecb0b3db298210ffc40896e3ded939f9c084baa886f3fbafe8354193d8d7a6a1337844d194a6ce959764cd12089bc1c4ac", 0x4, 0x9, 0x0, 0x9, 0xfd}}}, 0x120) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x0, {0x21, 0x0, 0x0, 0x80}}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000001b80)) recvmsg(r0, &(0x7f0000001b40)={&(0x7f0000000180), 0x80, &(0x7f0000001a00)=[{&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/57, 0x39}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/42, 0x2a}, {&(0x7f0000000800)=""/147, 0x93}, {&(0x7f00000008c0)=""/49, 0x31}, {&(0x7f0000001980)=""/115, 0x73}], 0x9, &(0x7f0000001ac0)=""/81, 0x51}, 0x40010100) [ 676.170466] kauditd_printk_skb: 16 callbacks suppressed [ 676.170477] audit: type=1804 audit(1599311936.106:1250): pid=883 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/491/bus" dev="sda1" ino=15980 res=1 13:18:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) sendto$packet(r1, &(0x7f0000000740)="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", 0x1000, 0x40, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 13:18:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x88) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:56 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/212, 0xd4}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') preadv(r0, &(0x7f00000017c0), 0x11c, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000900)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x0, 0x9, "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", 0x4, 0x9, 0x0, 0x9, 0xfd}}}, 0x120) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x0, {0x21, 0x0, 0x0, 0x80}}) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000001b80)) recvmsg(r0, &(0x7f0000001b40)={&(0x7f0000000180), 0x80, &(0x7f0000001a00)=[{&(0x7f0000000480)=""/224, 0xe0}, {&(0x7f0000000580)=""/57, 0x39}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f00000007c0)=""/42, 0x2a}, {&(0x7f0000000800)=""/147, 0x93}, {&(0x7f00000008c0)=""/49, 0x31}, {&(0x7f0000001980)=""/115, 0x73}], 0x9, &(0x7f0000001ac0)=""/81, 0x51}, 0x40010100) 13:18:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="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", 0xff}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYRES32, @ANYRESDEC, @ANYRES32], 0x20, 0x4810}, 0x4000040) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 13:18:56 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 676.489334] audit: type=1804 audit(1599311936.426:1251): pid=866 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir412156832/syzkaller.1UboLD/225/bus" dev="sda1" ino=15868 res=1 [ 676.645213] audit: type=1804 audit(1599311936.586:1252): pid=915 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/586/bus" dev="sda1" ino=15804 res=1 13:18:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x123a81, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETA(r0, 0x541a, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x100, 0x0, "0000000200"}) 13:18:56 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 676.884841] audit: type=1804 audit(1599311936.826:1253): pid=926 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/37/bus" dev="sda1" ino=15758 res=1 13:18:57 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x266802, 0x88) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x2c}}, 0x20000000) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) [ 677.247659] audit: type=1804 audit(1599311937.186:1254): pid=939 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/492/bus" dev="sda1" ino=15752 res=1 13:18:57 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 677.555941] audit: type=1804 audit(1599311937.446:1255): pid=950 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/37/bus" dev="sda1" ino=15758 res=1 13:18:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)) io_submit(0x0, 0x0, &(0x7f0000000540)) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:57 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="1a0000040000007fff010000010000000900000000000000"]}) r1 = socket$inet(0x2, 0x4000000805, 0x0) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000000c0)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000), 0x4) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x4040093, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 13:18:57 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) recvfrom$l2tp6(r0, &(0x7f00000000c0)=""/217, 0xd9, 0x2160, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000006240), &(0x7f0000006280)=0x10, 0x800) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000cf40)={{{@in6=@ipv4={[], [], @dev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f000000d040)=0xe8) sendmmsg(0xffffffffffffffff, &(0x7f000000e500)=[{{&(0x7f00000008c0)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="558e00b5451a0e7bf9d942f10748d3bbefcecc3f990c9fb1b795fe3b55ecc73edf957e99941b4878e3eeeb6e61803625e8202c2df0684aed4890d52226f2206079e0c55320929b4501984039481649b5ca8cd3a8bd6692295357decfd5386efa652c010ce7aea898bc2585242dc3000b1b8c42c0982548dee75d511bd6bee7c64285216224ddb1ec858ce77a6dd8933d1b60083ec02d2d6e3c7818f3339baa5f8fec5b5efb15f70aee57025de0f2fcc1166e00200a5588af22d3459489611e6cac1b52f5d59e6f4774156e0a6c6f2cd699b308edd26ad42c40049b24b69cd456d9e111", 0xe3}, {&(0x7f0000001a40)="0c0cc85e7089c565314a83f320ea590096899d583e9033c5a77e08917ce325c73ce5c9a21883e5c66a4091206c685ca4a0427d569b5c01154833a8a3ab444db9cac3bd35008264a742ec3c924ad6314c2e09a3fa685059a0972e5ddeb1b2eb2e10504356ca453ef2e68fb3750fd6ecd4dcc29c2c2cd1b79c0a3092d4432394f26298df84cdcee7e6f5a592ed6aa3783b0dd21b0db402690d4ec42d2b853afc6f933e5d10d3af0b114b52bd83b5bf8bcf849baf6eca04298c0066897ac43ff6686403d17dd954dd5183efeab765555a8e52a9", 0xd2}, {&(0x7f0000001b40)="476ffbd6b92223930418b486757d5e980bd581f1f2d3bd6009077b569134de1be7ebccf86d551a2b84f71bd2f454bb07ecd9dcd4365cbf473a216fdcfe1be24cb02b778075c6b25cbcfee3847e5f223aba0c8962e5e3424406a2f9ecde0a6fe4cf8108c10d06ff4e7fb4f39b58aa244398007518d76a0b9578a8f499412c788f6125cb00b3cfceb206aadd58237a09c4b7e7e17e4936199446d689933ccf0b8b", 0xa0}, {&(0x7f0000001c00)="d53c1db32b55f1fb50d69bde1e331a8a58f9ff5e13dc3034a4192edec022baae25d43a1087ffbfc0b4f0c1067b16829f3237e45a5876a3465cdcce3333faa22c71c53383d7d551", 0x47}], 0x5, &(0x7f0000001d00)=[{0xd8, 0xa, 0xffffffff, "4c0403270fcf8edacd0b6f07f14564e32c2960926ed3cf796ec9bd483478f41f84e7b867dc1e1c5889bf7e0a13cd5e58ecb224890e6d6cae3a87843b6322b81e434f1879cb561e402da3273896e3c6d266128692a651a5b6c41c2af50f0035371aa4124161f3787a513faddf5ac10eec21e9881fdc5d4549fa34d4ccf1b87b8a9a4ab400619f9c0254c6561683a7f0b80c064067f67cb89af77d8f6086dbb3fcba0e136e5ddfe88f71e0d588675c891c88f9913dcd2c373b1f4862bd019daaa36196fa"}], 0xd8}}, {{&(0x7f0000001e00)=@llc={0x1a, 0x100, 0x3, 0x9, 0x7, 0x40, @random="44a5b397a033"}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000001e80)="bb243b4259c3a92ee9b2b260c15faf24a3d49f3681b8740821723b287e349582f1ded6868e3b8811d5421c849043db5a34351ccb9fdf9bbd9ff07fa67f8580150f05b72db3ab546b54174ae8208116c0e5938d919d4f5516285b8b46c18b8c0a73251b870e79d1a2c28180f766af287ae05aba77caeb1a98fc1005e9b08c450e1dc8cd603f3f95fba4", 0x89}, {&(0x7f0000001f40)="60651d371a3575ed93e43dbc7d7497", 0xf}, {&(0x7f0000001f80)="d6080b29b000b5ac0927b31c43ec4d2dcb47cbdc3603adb7ef8bbfc619b673a680e074", 0x23}, {&(0x7f0000001fc0)="b99fb3fbf179ccc4b7117aa1e28f66ab08d07b95eae8f170cf3c94613a280d32", 0x20}, {&(0x7f0000002000)="2f3b25dade9086f1cab16b2f198b9196a4114461aee23fb7356304a8aadce3cd39f067acbeb2e3b8c2c5d8d866984abef9058490d094dbe9081ea232b313b1ec19215050fc4b39e2ba572bee5d854dfc3d01974998", 0x55}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="c9fe533ca45dbf807f40d8e9e3e0acd29cf7e239fd3f7a31e2958756f9fb2829656f76fa25bc993278e1c0b17685", 0x2e}, {&(0x7f00000030c0)="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", 0x1000}], 0x8, &(0x7f0000004140)=[{0x1010, 0x117, 0x9, "ef947022e8693a7f32fea7adcf71404f27d87069f62d942806c2cfa9c1b8f213e8edc52f679d501b93b1434950118934bdde6b20b0ff2ec8380298a886d18c25a37b204fc44cbfe67617cfdf871aaa0f5a24594db88f33ad7e6ae8d948516cd22240e87ef4115aa98ee2518450bcb2b09c5126eb015adfbbb2bc51e86899f9762d95bc99e25df4b3074056fe4b3956a72ab3799824b59bcfa7701663aecd066fb0ae94f629c0930cd3ee83959ff1f87deda598c8562c6523fd5c44486ee6f06a06857c69da26f27911763ceca09bed4083ec7fad283c48d759e8b90d6fe56e4819f8b9aa2cab1afd27f28608cc99b11c0027f0b18d2f682d24f02ac5516b87c71c08e284ba54f364b618c4ef0a9e5231643a481b47561f4b9487ba67fd4a5bac15f1dcd8951e7b5753237a676f1bfb3d85a453ba9c89c37a1864b4296b448a00b25f52ae03fbf91d51134227fb1e9d3abf1f8c46fab6a2c52b756f84a0cda5316b1d01e46337c8aac0e9f8d9e6fd5e24fdc15b8c0cae7785f1e9813993a6756c17b3069f9ae9cb8e573025fa660983384e3da9377eb644887aa7e50cd17cb17106c0e5745c1fb84b11767185cbbd6b566b74c3c5004a14decdc718179f84af268a96c0b79ac8660a7c62ea9cbe1ff7e8151f45a920a1de55070242779292798e8cbea8c22059737fcb389ade896814a60483067838a030a4b0c5e7c703bf12db602d2480f4ba5048e9f98b1b945f198c547a0aa6830b654d785954fb23d3f7d8e49ac70b6a6086eb21a2e7696d455d3270db92ecc87180dad2c071cb2edcf807f29a2e0941ecdd89cd05f8660beb85a1a8ba93918a6c68c9bf11b381f54be18dcf2f4275b03536d5c4d2223ff5e11ccd0adb87f711f860cf6c8f92ba92d8104711c3f1c32a5cc90b363433d24b1cdb324b83d4b69fc8b10490efd9acccf32f26b36f8c6e843e9dbb9f4a876c277b8b0b965f0e9d038fcc37b6f950bad7378f8e9653f2b7d65af3a2c11e4c68d451354c78b081c211798419c6cd4b5336b796247ed1b927071555e6965d018eb1e83aa3420656cd78bc291befe19b48ab8fd8c554987a2f38ccac0393335b87b9fc3d0081f8f57bad5add4da52e41f90285c91f12d1e4e4cc758577c3b545f49710137bc56448ef48b238dfd3dab0564edc8e772a2985be98e26ea8cc59c83e65e0f8f82ee24bbc38a9190279f7cb49d193b3a1a98a3e4ee67ed11fe18400be20477c45c8174a89cbd080ca5c7f3a1f89508e31bee6b31c168d50b3f2e7f602d58e1695ec657d8d4dedd7e170eb5e9e16d51d8e929e32d7b298e60317d316d5ca6a2eee4640b587252703c8300fce2839ccadf629974472d5cb398d20aed336b7355b8d50f2e0ff664edfe48c4357df0f49be4d007f501bacdd07db4aecc8b15cb9efe462280937dd4c9dcf8d7b6ad20a625a4064277ab2ec30073b926167670617e64339175d7a794cab79caab4bfa0b6923c89642af9044136459b08fcaff19f96dde3f577b0586abcb8c79062cd887109f9f396e276849bc3104186db839bf638292fb30a1be5fc8871f6db421ccfe77bc58255363407689f103fb051360a8eb1f071cb331c1594bcb4a78367f2491182061df8f23b5e952bba16d44e8a865e782fe0c50d37c8e9667227463b325dece95082f1a6ebe792b76a4e76851698a9c76c548262fbc441b62a515cb540b20abf8fd1d88b565bc5cfcc89b534ec309569ab7d2b08f566b359aa61cb368650fc87d6d5041b60a5c2f5a1619bf15a2fbea7c09d0d435f0e45ee198ca249995a58be0a253ef968d757b073d1a14e8924d966ef1a072c57d41b967bd35e21c3f9e96a67d972cce34d46cef6c9716141f4b41b59b781704c109c82d2b27fbe301b6af1eebb0f87e821adb9161ea7b94ddc1c1b3e2a58f3b9f2473d721e6b3b664c99728d72a7560d98a0bcb1a53c83bdac83b773e511bcf109a54d696313cff15e5720a32d80098fe37dfc38effbe2b1635a593e6c6277f6b6722328f7c1d9b3785f35fad27910f6b5ffd3f337c3da21806d7c7c3eb7bd6a768932df09cb2b123fd3d3d20508674163b163a4329168a75539df1c015681181353d275948d573d8149787589e86cda6e3bbe88d8d12b63ef4265e69d2cece03f83311ca01775e2c7818790fa702ace889cb61f86be1f96400d37a26e30876bcb47943374ce83d225efb8c9789e4e59a497b46876c0819d375fa23f670772b3482b3517bafeef52368098eb51ac933b09e11a47817f0ad40baa6948014ba305cceb8ab1edc554d9f401b02180a1f4228cf2cae69834d1bbd7cb0db62ee88efda26358496c69ec34744eb030e8001ab1324feae8726fc3c180f5251498953061fa9026b3c952b96b226d544cd55ed90c82899264afc34575a9a07865adec9506f33e61cace89d09a090c330ed164fbb4d305a9729f5af125a0e1d445ad48148ce620660b379a93a1b8d74fed150381efbd3f1de949d307ed8c0969593a971025b3d4ade5df14138940c892f8e83418d482e6fd7f93253e1e8c8efddc235d7bff003eb7076c4c0ed1a10f8d097ae996e3318b142de8b9bac4678f9b25f48193a50d0e421623bd46e289cf267743826828864dcca6b3bc591f10ee5135f8950ba170e7faa6e9cb18652cc9b49e770aa48a5d7d6f6c533c4e79b35ae0da28ad09d84e137eae34b9f8db953222d728ebcbcc44715a21bacdabd0e88f9877c2584c2b5dc5229d5830afef3c82e3e014208d621fa3a6356b829095774dab7ea5d918cb53bffbb0cfeb39921f2c3dfb0d03ea3da7aff016f752378d2dc08018108e56055a106f0c966f4c5f7cd194f1d5a6c7f7fad25955f71a4bf6fc0205bc4f9cfa4851d05805ab2386803cc1f44bd25b9dd61587c7e5a9a93593e6cd34c1a095ae8f5db5c6074abe477df25060f2d48a9edfa073e2f9a8c4e3541b701b9e500c01aa4703f0a8ab4fe73c0deff5250e515bf1d0bb871af75f113624efa5b3a43062a7abb76a6cce399f2090987f4ba61363943e2707815509615862646c12cf0e767fd1f1a0e43ae71e74696c24697876f6be7ff27bf56ec647302b376189de9baf13e789891520aa2fd261817afa245593561c780ca41c6304ab9995caf52bc7264a5d9a65940ab05c9497376f2c10a9fb95ce1ea693e5a197015d1cd25cd38c018c910ff95c80d386abcbedf168283b4f984534f8e17c5a20dd54a1e63d971618c288219622a8b0857e64505eeb0b28997cc1f43507d8f0a93020b527a228675281148752966f7a434ea019cc0636ac4a7184f72865523bd3f86fc6a60e3af9177500067f1a844c769c3b6b6d2091e1ebcee964fd4a8bb32d634577493fbc2e771fd68e91663f1ae861fec7d88df7bd04f59ea936fd91fc482baf8e749299221273c2f53e63cd63eb0267ff6dd70c55f1a80ae61f999de5ab75f3f49218eb0c1c03bcb218afa2b5b8d0ff41beb50c46c42561b4203cd189c930c0b2b7639f3ff7143e171ef67f24c831654e2431ffd04173b7bcf6b8d0592a1fef880187d91a8249b93cbceb5dde7d2c337ff40b48af58460deb31b42a2ca47f3b6465c3c06466ad5d77c251121c496d5038920a5e148828663e66f1a54945fcbc0fcf04b423f3fd3cbda504e30282c86c6ea024b612950a3104ae49e8a6f7710f2031ec948ca19491f403bec4ae9b50ca04b88bb502f11257595c7634d04372ae3117bcbd8c2a4daf416aa87e12335a2539b31b8b59f49ca79e744b0f74aecf2f33898913963c62bb54a071abe97a4a8c1081592d3801c2e7b5eee738a0c7f682738dcde31e0038bc0b8ebae97521a965f919906a370dfcbf33dd100ec3ebddc094f552e57eee7feccc20ee7670aa69d9400e6d86f2c4354b35a8740fd08d3a95c150f3406640137568a121afeecd938c13e189fedfd8f23c25222ba1951e9863a509d296e7b33fdf8700525e4a0f1600a65e8a2953ba73156a2beec426c7d2f31b2dcdc1745ed5b2dbc261a201dded342b3befbebfb9b20be3519aa67a13efd54ebb73b0b7af361a2a512f1d7f42c36f00885a17e424f6c99ad58018f57bf002b0325fa1cdc57933ed7c0526ca5ea7c30d2c22d55708fc31e44943a92742640f5cebeb82edeb0923fa24e3b552b34ee8fb49b0255e17c159e3ca02bd8fd1ea01221ebc5244bd01c956d07323bf4cf351ffa42fafcedcf99db9460a6e06e86710af28d5cee156e48b50aa0c2ae725ea959922ed1ffa747d1913b9b2eace9c49f85de2a78f9966972a89a965d7eae2e52a03a86d59321e5af985023f174b64b1881e2ccc961ad385a454d4d4e15a760dda126a16196b1d14f3ffc3d1dc278acfc8b819fdca1077f89a34609b038c582d11275d2d9e02f81692b99492badc21cd6545b3050a30f972fec8ceaf791396475fd94a0413090dad214bde8b5bc1fe8e27c4c448ce7e81826e9bebf7ac6252dc2894ba806429e63bb79adf214e6cc70ab79211d046c94445b9e6e92c463befbec2bf8191fe27f81c0dd2341d8abcc3c27f2ae7de4cc6f2a9b56da28ea158e0abeec9bdd3cf4357046b25cd15437721fb3479ac61bbda1c8c3b0851c42ca1611da0d3cab42fb38dfe72ff9ba970d9b6551e2f2246834c5d2fd1c99565ac5509186a79b71fef816c5e5d1960d216afe17568a7c18b7b697ada56884febb438f4caaa91be8703a41782c98174e398cd3836a2df755f9507daf9e114de3a428681641fd71590e09e55b32e32a8606b80b6fdfe722aad83ee266d8f33eb3481886fadd156cfb1d4d32325a820f4604487ac09fc69abe0ebd648dd3421ae2cd56ad7ff24765efdac88f196ec8a8aa01e643555f756528c04c30fa90779fc81232c59fb35e371c080008b50290b818f966a1bb50d7e2342599d5e12366f01518cdd7022d2f774ffb271cdcc449aedcb842d48f35c11195f9184cc9af1e73af3dfa21ee508509c81c8c4c64e60744c0aeb7f05706a8cbf5d921accb1e8a7d3510c3428af4057ef47949b0db7139bcc42f58e4f0a4a793609549c9325a52d8c9491639343650cd7715a585318839c92bdf29ca00579d3777d785a8892e3638d9fcabeb7dddfd5cc854a0974f41daad7b8f8eed079c1f27ea53a5735703cc7a8805b5e75d10196df73dfa2392fe28173027fe639e7cbfe2355ccb858d78a7cf5d5caba95861c567fc54c08fb4cdcf7f38a54603aa0b74e64290e14718bdb5d258e3c7691467d4473f09efcd992629c1cb75d44e9cf30e8f88bf179738a28e7aafa933cb17b9e4772464b673a7f6e04fa5d238b5b97f7a740337e33f42c5820829a2dd709618816a18d7987c07425c108795096bcd6871a20e35b0d0a703549a09236cb2dc82fec2ead759a26da842cb56e1ddff697ca38363c1e8744c314b62a7dabe62a2dd4085cf54cbba0fe5b7232d00bb35ec7bd117e834b66d48e10e560bf5f63aa40e93487a730f648fb827f1d0e798103c60cf21c4fd1973956bda310841e01f73af379025e3696a58289ada9bf203cc3de88d3125aed5a7c8fa8327d273b64a0e4897a8526f9d44b1258ff509ea2f2f1386591a614cd26f2dc61ab324600d5c44a77dcdf54b763d7afce73bd811ef3648fc8a7e207deb55a58d65dc09e3fccf2bb15f09add6f14af1bab1d57ef824f36add53a386e1c94446e910c31cfc7fb7a701e4694fcbc7fdae0b6e2d090fe533cf0c7eaa2a6407930c7fe22423b95ba81e2ca08daa0f3e66d337bb6c946fc42802b46432e784ad3ac5d39857e423b8df2c99f4f37f8a"}, {0x1010, 0x109, 0x3, "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"}, {0xb8, 0x107, 0x7, "6c6e0f0c59c6d39a12967f997e37b09e204658ce82b3b2cb2fe40b8c7a4882b43b6d0d6d57d890c5e854e62998da9f7c2534132ffbe33435429547b7c97c4a7000fe53b73baf81193e060819fa3f78a420fc4e28c461fa1bf6b57b2f083fcb51f22bd02115550c67b8be7b111bbadc5e8bdc3cb707cef18665f6cf1a7b5b64a23bcc38b9b6b928301821e7e60c9c816ad5533aae229661c7456caa604c8a8a8052"}], 0x20d8}}, {{&(0x7f00000062c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x1, 0x4, {0xa, 0x4e22, 0x10001, @mcast1, 0x4}}}, 0x80, &(0x7f0000007500)=[{&(0x7f0000006340)="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", 0x1000}, {&(0x7f0000007340)="f48903db23f8338c3761735487d995099dd8c7d802616202660082e93216872be38602162496be947fa71f3f5ebb49aa16d770860b887ca0924a386d3699723524811fef736acfee5920fa2dfc22fbceae6b3ab59af2c27a55eeb534caa6667ff38615566be4ec5687371734483f1291c1756f9f6e38b688fbea70b99e53599e77f4dc882214", 0x86}, {&(0x7f0000007400)="a8401fc9b135fb4bc926ab9f13ca5c7792443c9d4079b9145735bb422cbaa9cb83c47f4ed27252b465bf829c2c6127fd81a9fbe7e96d074e9bfa8236e43db6b1bcb242942a3aba3b2854515cacaca84efb8ba37af21af81a808571fe540807d5d5f0a52dbb76e1bf98ed73a447bc0e54d98ab3a944701ba020601b52d5a53b0250a70d18013505c09c3887a838c00e7c839fd9cbdb3abefa81c7bed4dadcad6e245cbd0434", 0xa5}, {&(0x7f00000074c0)}], 0x4, &(0x7f0000007540)=[{0x30, 0x10a, 0xfffff67a, "d7683e4863653828496b706e7b2dcc2e390b44551c0a07917d"}, {0xd8, 0x111, 0x0, "da8f7c28d2dcd5ecf1717412cf48992b892e0084e93de5ec50eb919f493ba938d3c3d6656132db6f973c4a505b57951f596ecc574ade31b84d8a0627bca49b9ce409fe5d66f539ad11f6b41d58bec5a7e6a31887e4ec092fa62cf902fe0aaf572f70257d7e7f30a94da087669e4ce5e170b57719560e52948ac927a4769f3ac7903caaf3651dc4e71a889f8e5e07c0131bcccea8e67fe8183054ffdd9a58741ba605c035770d7dd4a7ac7792273c84c0ad7c6e997256f9824ce4f7037ac5619a15"}, {0xc8, 0x10c, 0x1, "5bce9cb20f12c3b6cad00a97a996eef21af70965beb75ef30774bf53746208688a971e75878359e85d1891d538a1f570b7cf095d0377e1536c7ae605ff61aa218d38814bab23ddf67daabc0feb741d54fb14e56d2fe91eada7a3289ba135fb01680fcf4632b47355209ecf6875e2cd61cc704bcbffee48c8ec5178db53b31c397162723f8d5e5e5eec139abfe01391ea3b32af2aa9933d2a509e1835494138ee6f729e79e80eb86b0fed381e8302ec177c42"}, {0xe8, 0x0, 0x7, "04c98615f0cb213e4d91ecb33d38a2ba0461d49cf6c4194aedcdc598526c65ceba8b8309659d1cf4a17ccd0342de72f46742affb128daa7368fe642d2b4cb4ea23bc06201f58cb220d46bd64a1e97a807d6a75d432e03f9a061819998cba7637531f77ae8b086badac7ac5b3cc92286997e57ea989eab3714b2dbf5b390425a9d66da7b60cef57b295c4855ed70b54b1e03a20a5a354f6552587d04c1ada68c143b197efbb3de4132556fbd37c49e93e6ad79feb1a3f780e8f9619ac7e6a0940d7f00f9990067b8f211bf84f5a6977447bd7688de2baab"}, {0xf8, 0x0, 0x0, "87b15188a3b984cbdab3d794c2148d83058634d2d738ab1bd64cabe41dcc41c9a7b6c04d3d73d4d845c9686f82a6fe8b2e258ed0add29566be22568f4a1a32724fccfb16f1f5b589c13190e64c7c3f759574e78585076f4c742411a14b82c10f1b4207c915995f728be31e757d83399e4975ede4ab96be9292b249f1b1c9bfad619a050904323aa152b5d3e7c17f0ba38e68a81f5548e37d8654b23afb2ada0ffc10445c11d0c56f741fc79c59cd8ffda8f6bb64aa30d150f1c7aa69e335dd96a42f9aec7b733f060668e93e9a1d2472125832a3b2e7c5a2a2ca844903483c9c5ea17340298339b5"}, {0x78, 0x109, 0x800, "c66899637f07026f64ca406e76a526f9f5c563065657f8135931eed8d4fbcea684b89ef1fbc4d1853c653d29253a81363be707f14e8abf0105bc9caa3f89832219aebe9fd73312305bd31edadee241c7421044d5f41c81b57b5db5f152635de551"}, {0xa8, 0x104, 0x5, "74bfd7acd5f4f7a5e83482dc7db039bae0931e2f1f4558c0cf6c2e0f7a96d6fa11a213fb03d476b8fde0249ffd2fe96b7ab2c26ea100c94c858f207b6b392ee5da5e1aecb184f365d81e0222b67dda9dcf773ebf406f9e7a39d87283f4c7a582792165fcdb8403fbf45e38850e0accaf5d130fa56f1f5cb2d90d1e8182ca55935cc531d0e12eba52724f1c9037169570a53443201c"}, {0x1010, 0x114, 0x244e68ec, "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"}, {0x38, 0x103, 0x3ff, "8d87479c726aef47f1906796f24e49b3d6207f76cdec022ec2ec66219315c905c074"}, {0x28, 0x10f, 0x9, "8534ba9670bc5cb04d2568dc604a132e6849ca61abc3d38e"}], 0x1540}}, {{&(0x7f0000008a80)=@nfc={0x27, 0x0, 0x2, 0x3}, 0x80, &(0x7f0000008e80)=[{&(0x7f0000008b00)="dc4515ccde2c0a60ca53e88b63af2469ff5c5e340a5b943c1c78d0e91659c74c749e3ec4685a768f827ac61714e909982f038cd16010ee0a90f3b99b5579a5207fbef7f3449e2c9604dea26e643902995f5dc77dcae7d53a01e7ef1474faa6a16a735aff5364106d36d0d767153ac6b4296688751341546ade1e46dd2508dbcde3c066f357b42319d041cb474723cd6836e62901f4d13429f27045605dc5", 0x9e}, {&(0x7f0000008bc0)="22f2a493d08485a22b2ac4c07a3d2e2f10197488cdda768f3727d19c386d5d17aa638d039a44883499870ae517704731b02b4fe3a11d8f15d33f09ab2e7311f71108da328a0ef25c3ed22e386b00d27cff1f1c774c5e4b9bb56ad5a8673214229b0447418419d59eda45e705a7d7d5a4fd4c99eee415b51799bd5a8ff2bc35187c20ad366594721cc7fa899b1fd1bc4832095115b52962a6bebc336b9cd7d951474499bb0405a5dbebf052a49bb41a271a0029b829ea131641", 0xb9}, {&(0x7f0000008c80)="31fd270e08dd745e0c5cca780cd2d396029c1cdc1ae95f011f8efbf362e265f6fc149da50acedd4cd2299146e0b9", 0x2e}, {&(0x7f0000008cc0)="ae0825ed6b6852153fe4803105b435a543387bb09f6250b6fb92601d3c227f44932f5efcb175e5c4b59b4f02510b959673a78904a21a0e5626f98f8f79942df1bdb5f53385bb81c0d97a6baf1a0b53d0a444e4a91ef1294ec390459bcf310612d007563cfefa9f247932b487989f105af987191871890cbe3eee", 0x7a}, {&(0x7f0000008d40)="b91e5b3e52939968f14a7046053cbf6d5ab10a674b9e3bc385f68cf15912301ef11425637991c9c9461513c6df864b304454fccb958fd749c6c8749dd62fdfc1be0fcaa98bbcbb930f9e65455d80f5654e45433991603ce6df55c38ab467ffcc447f529afd836d3de8cff348794349f6e82c5d4e10bb1bdf52ba78af1176ba7af64e009544a132dc2eed3addba84007c0ec6a29b2ec71de1af077fac44c222a06aee373fa39642", 0xa7}, {&(0x7f0000008e00)="26f1fc7a5032b01d25e5fea2b8fc05daf632eb6b266966465b4b9c0d1179b65c62c00517d66c9e9c08bea1755b26dd6fa4daa9bc37f6622e2039da2b0eab12c25d78b5008afb2cf7439c", 0x4a}], 0x6}}, {{&(0x7f0000008f00)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0x0, 0x7, "f6276c8b8ef87b9fc3c95272215299fbc98aa727131b072c5139ca1f88365a8a9aa4fcd12406221d587a68b055ce4794aff4c11327bf398b9ab4692641dfcb", 0x9}, 0x80, &(0x7f0000009100)=[{&(0x7f0000008f80)="18de8facd6d5c36a79a14e24595c373c87b379a41a744e646665413d", 0x1c}, {&(0x7f0000008fc0)="fe1a9742c56cf4", 0x7}, {&(0x7f0000009000)="55cf32eee59326dae78be6cc9833f2e0b8a5755320aa7abdc249c84799d9f193c286a3f3ce9ceb5e4dac73b78c76a7f169084c23c9b2b942c2188c18fe2468f1264d4d8c60635bf9f1a7dceec58986f407e5d12369194b10e48fe1c479f2af885adac1ec2c077259b48bca71fcc9bef0d8d33dac7b718a72fb87dbbfc55680bff91eaeeae0ee8ef5122d3b4d9c4f7de0c45d9f6e3035af40ae8982b2a82c6409642ab9ce1c23166636421abbb3f6eaa360a2fb8240ddf08f8d97889444204a56baa9b5f88ac3a9dde85f0638007f5115726b3353d2c46594736490", 0xdb}], 0x3}}, {{&(0x7f0000009140)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @broadcast}, 0x3, 0x4, 0x2, 0x4}}, 0x80, &(0x7f0000009280)=[{&(0x7f00000091c0)="68a5ba0b3491f1fdb03cb197a21ff56afd785060ae0bc39863e40b1dff30a79c5d63a6fac153e8722036e8e2bbe95b8780bf2034b2", 0x35}, {&(0x7f0000009200)="2701c9fedef7dfd276d47967e1c743da61f89f9a23840bdc006640780762dfe90cb479d7027091cbf89ff34b7d7b2cda634615eff6b934bc22bbba6a2806edcaa0568815b383e099bb886c2a1f881531", 0x50}], 0x2, &(0x7f00000092c0)=[{0xb0, 0x29, 0x8, "ca3d0b39f450b609af5f214d070ec59c211cfd3d5cf19145ee2c7d116ea0a4ea9d2879837a7ab9d6771a5f68ca66b398f40e13d94cd2751bedff8fe7b41f3c4c6f78455d7dba91698bfc3ddb3e555d3b6cf893afc7f56480a4f959e07cbcf1dd0c3635f6b8f43fb32140bb548d3660452bd9327c5d1a2859634d9e5c27de45a5e8fb173f8f08d857a4f48822395c88268a76b8b57cc29ac9d5056b"}, {0x1010, 0x112, 0x1, "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"}, {0x1010, 0x102, 0x800, "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"}, {0xb0, 0x11, 0x4, "8900bccd33e0f34ade6fcc59bab11e4c8f6704b3e7dedd6e6872815d5a60d707207893cf9da8df2318ba1af08dcc042c48c33ce7450191005b34d5380380a98a71f13a2b27de30f15d0e0743d744e5bde4193a761920b9695a099bb3c78bb5c215d356f538c28eb08c95b53e40626e03c7d9e62f3b22ee7dc33d47e2139e0d90b2895329c0b261f5a1630cdae8d89993ad0cedff825898f997"}], 0x2180}}, {{0x0, 0x0, &(0x7f000000b680)=[{&(0x7f000000b440)="524a0715b1411e1f17b6f0ae7165cc905f5c5d8e6d4ad3e22edc86715b0ea17785978817746814a16933bb1a0a7ed4f26b5f69c420075da91650f2853fccbe2c6efb95ef6d0d", 0x46}, {&(0x7f000000b4c0)="a6e184bb1b4bbf6578f3bad90df2e10ffdf980cc4b19f3460e0efad7d81421da3f7f230b55b50607f04a428adbfa8270b0acb5a223b93772210d2640742504e63f39c39e9d35a39512335161a160eefab11bb098c56d6251dffd35b10e9d23028d49e3d540535c22b6ff6a4321319ffc2e4c51a61a5c7f35faed6aae9d616468ca61bad52bb099522aa1d852890ce5074e20f719d027211eb85a0327a6a740735f9cb973f53107490de6a6712e37", 0xae}, {&(0x7f000000b580)="40049e034da81071317a4e72fd07c9c14c6f385448b047d50894d46e969983750c1dfce672826b22f3b3b7006ce2c65a4aac0c83c06e368aa05cb9ea5f01a64c67047ca981660e093b594f77d8a8e726ee74f274dd70c888e56da073778d84c8aa7410cd04c322e815d5ff0106e1ea317c59202a2a4b57340b6aa3f512e1cbe5ce6a40fdbfc042f83f59281f14adbcef2c364cb874f743fef02498d87973c21b6dce1b5353f112aca884d8974beec02c7d03c592628271460ce8fbc17e32d08c7850dc5ca9ede62372cc9e24147c7d6bfba60b5738a90f9cffa1528d7acfcdda4cbe153502", 0xe5}], 0x3, &(0x7f000000b6c0)=[{0xf8, 0x1, 0x800, "d4536ae2f542492838a79ba735d4bdf39ebc793b4812cd4f5e297239ec83dce3e90a8d2aaba8936e2b6762d25d0036c30a0bc61b2cfdcc96fd4625182a4b5d5e55754a440822eed9efe9a603a22dbfab915021c0dec91c6c4c55a3095842ed544214131af63bdca80fd13fbb4b3a70c8ba2fbbd09e96afbe928f4375761cdadc5e64207f77831fd2e434bd70a3d867c1a1b0e3e04b7fd2b7967c148600d8e815ef2b1fabbd5f6186c92afeaf756c020be4e2f3d8ed5e3236042719a4a028ea6612b86905678192ca795aecbaad4a4ede86a8908040e3c110e2597250af83a69263b1de3166"}, {0xa0, 0x111, 0xff, "abca1cc33f157792610f079dea5c4ad997c9ed1c1f12d6e963e1197201d5f34825336717a750e64b3a35e58b0a151050c17279a68b33ffef5a57be8a929d39621e057a945a45f5d39331c38d322ce75d5c3667f37e86d97c04954510441b857f742ea4482fc9961a624942bc1522f1b3db5e07664ff75480773ae30ef7463afd5385459544add9afd9938c2b838f"}], 0x198}}, {{&(0x7f000000b880)=@ethernet={0x1, @multicast}, 0x80, &(0x7f000000cb80)=[{&(0x7f000000b900)="72024c5ec98613322e838cb5aa8f081cb05c2830d83a833c056a31b93dc87c8b7c826a7bfe345b050dd6392fb151ec2367e0df7cad6ad8458dd1aac489efc319b0f6ee2934a17fdb678398ab648c6913cd74792adedd9ceae4d8d3f1ae3f40baef806552a5a91d8a8f1cbc46637559606d563ebcd1a9ba405b188fea557c7cd5b83eaf3beb447271f4b75dc4a98f5f1d379437", 0x93}, {&(0x7f000000b9c0)="3f501268cf191cc6ad356867bffe36e4e54644b0487b6cc6526595ead5e271bb051ce7e8c0c4a16e7e82a2682e9f1627f4d86878f0097ac6fe569529efd8ea5623e79157013eb60a7e177908c0ad2d16a61a349f567ef3b12766eada2f458b7d31ed28b3d94012abf08c6247", 0x6c}, {&(0x7f000000ba40)="1c31c13109028c7d2e2f9af1d058c1a90d8f35210772765cae3135dc5ced795199194d5971b7875c4621bf79d1c57e8f192a96e1b5e60b6f6c9c27932f9a0f37", 0x40}, {&(0x7f000000ba80)="f54c643907ff66dff38d545349b31802fa3a67cd69d42f417b8f16290ebe291bbd9b6f5006353f19a20570917251677cec16e6e74512eac563793b21b0aa971973921db704fa1da5bf1f5068a5f1acf303bf30b7b1633da96b161be0063aad2311224b298b6c7630dcfaca70dc674b", 0x6f}, {&(0x7f000000bb00)="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", 0x1000}, {&(0x7f000000cb00)="35972e043049ca694cdf5762b4004f9e3530b4ce5bd3f80441f01aa3f1f2ad40344a3bf1a1642e54beeabdaf36e72b5b4b6645a402bbeabea5e60b2dea2a89c9aaaa2418bb016006ff78a88b1243e58b5f65eacf986104", 0x57}], 0x6}}, {{&(0x7f000000cc00)=@caif=@util={0x25, "056ac975107e325a963f2cdaccaa4881"}, 0x80, &(0x7f000000cd40)=[{&(0x7f000000cc80)="7de36c8776ff0d78b538490cefab7b85978c461b25bb2f69528436cc53e0169eacef29ad705ee080f5e30d743f5a9358affa373bcd6c9dffd7496aa950622c6724046164402a26723b35bdc6a851b66b2143abea84096d8777f41dc365eef65ecf5b98730784353c7bfdad627146bdb5889cc8748efde223b42a99a7d1c7d18d81a3817c27d34a699ca12bea1ad8ede1fed75ca8de6944621f229a7ffba659e135530d1ee2918817adc3d1cae6270ded354b151f742f8c", 0xb7}], 0x1, &(0x7f000000cd80)=[{0xa0, 0x127f2ae3c7475491, 0x4af707a1, "48645cb3064fc7fb88dd416d9b97717b5c74525f4ab4ba6e4d7883a81c2c6ba4b5ee8e86870e24db887668ede40fbf6d993d75df9f83a7d35cfe493cc4d814195a9749db45e254d02cc1f279402e89e6297930d5b11581cdd166a436826c72ef7f9033af878b7d56b279d5225a035d366a2a1d6613a498ae80886fc8829f729c4edbd8e81936d7248771b9c54be7"}, {0xd8, 0x28, 0x3, "c3bf18bd7331d719ac0f4fa5eae34d16b53e1d96e7ce94dc44aa0d8b36e27ee55bae9d22d5094dea88ba517bd0de76ac88590a1384383d064ee9d23f139ff870934d6142f43058bb623785e23762c40b3af07e93dc1d1084f20e54155da41ba73eab7aa596c09c82064c905d9666a9be58b35f7577eb04736575faa9614718202bc89b2898a994e2e2be9f9743ecf5fc84cd59b53e2dbbb8c2f2365c6e6d2fd42a635f8beab613e9be9875c02c9dfaae96c44f41c2a527ac28f8d3e7abb11f263ab7d05402f97f"}, {0x28, 0x3a, 0x8, "fd02c376be0eec764cef147efbef5e6c1e729a3922"}], 0x1a0}}, {{&(0x7f000000d080)=@ll={0x11, 0x15, r3, 0x1, 0xfe, 0x6, @random="962be659f72c"}, 0x80, &(0x7f000000d1c0)=[{&(0x7f000000d100)="304abb3fce9853acf7353300a45b0eef6f9c5a08c272afeb825b86e68d7f59af17efde56dc351ea1d3fb953fd04be08fbcb90a15eafe2301de1ac55660b89646b2c007e17aaa6a4841776b7b403e8e5642a796f0ddd233198a6160a43e3e92635494cd33de138e7c08c25000a16105dc604774d2050a2681658de7bec318a53b3cc3f4f2a561cf86849b7b1c870814e3c5b02882718ee15e618b162243ce835d9d1c6673c790af883ddf28acf4c9f4efa8b0d61554464990", 0xb8}], 0x1, &(0x7f000000d200)=[{0xe8, 0x84, 0x1000, "a0a0caec9149fecc33c8ffc35701630bafcc065ce779d9a578b076a776eea7de1cc8d3d69072a2f3dcd9655094e41e6fc5311e89313154eeff416819e07d1997584977bd444c7bcb020fe2c49161299bb1e261605066b700a69def24c9d045112287d1365ecfa6b531d49e61971b281cb6ecf75562ce99680d3377091ad789c6e7c1f6d8388737d242550165f1c4c8c01f865e0d534ad51ad3015033cdd35cb78ec7278436ae8c281a1ea60f9e1254bf16d613d5d538df6854c532868771fd7bb9cfc7d0dcee1bd40772c1a62b55696c0977032f573a98"}, {0xf0, 0x10f, 0x1f, "30ace3e0518aa92d7afdda704f073c9c559f97f93c5a64a259385d6c6774583ebec4cc493090f9691e55f871de5b6ef9802abf05b68f26fe5b31c5313735132b91479e8dc264102537d413e95575e017159935994f1bd5ad4cfb460344a97d02728c2bb1b02799cb3bdf8cb315ac564c3a34035b68424ffef7438c518808d054fb9a733793194fcaa107cfd8f48b61cf68946e57afefc0760a3fd8577310c5ed54f83b4c0effc170be9f45bde2bd14d294cc780cf0028c114034891875b854ba5fb1af58c5896f5c58f64083473ae94e0e11b5083b3f0afcfcebd331"}, {0x38, 0x105, 0x6, "0ecf48718695ff59d4941d3095846186c879a321d5bfb2ae80e27e7096c9efcfae880aa358"}, {0x1010, 0x100, 0x2, "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"}, {0x50, 0x10a, 0x401, "672432184b5c270e6d20cd90da51290eca6cbcd744f5295af8a4d2652f678b2506d65b97e0fbe7b60ca91006eaeb6a01ae13b2e283a65197b9"}, {0x58, 0x84, 0x101, "da04f3968fae377e52096a405cf3e31c2a49467445c53a5225578b7f1df1bb36a9372ab8db8e18d893ac3d24489eb70ae8642f0433add445324e343b51646a2fc5"}], 0x12c8}}], 0xa, 0x44) close(r0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000880)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x28c, r6, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xa0, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd6de}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bf1b1e1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cb50f59}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6538428f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f6f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8f1eae9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4325f1af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53ba42fa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4643}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x602a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72597827}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6484}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdd278a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x431867c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6551}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeeb3}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x300f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1ac, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e0e33df}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x794ded0d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5766b4ca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}]}, {0x4}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b5ad20a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b65f9c5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1118936a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b7e4430}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2074479e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76b8be7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7748fad6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45ff1263}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c70e93a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69b9a1cb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cd1a7fa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ec27b9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd2efa1b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c20690b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a5d039d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcecad1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xafbd586}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fc389f0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}]}]}, 0x28c}}, 0x5) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x1a403, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0xfd5, 0x248000) sendto$llc(r8, &(0x7f0000000380)="ce707fc84ce8ef2073aecf43c78053539822fc8f85a90f10b1287a2c972d33a1f9eafe0ee753d7967cd35ed252e8793ea060e190c4f2746de953f3541c10c3c9bbcb9f3bee3bb341fce3b7bd890165fcde93682d202ad9db36b17258b54e2238b5abc95ff298e3b50d11de9f90cb5d7e9412cf9028e1188fd031ef4e9062b7f780360e0969bbb3a5105e38d4a0e0b5395746205f076c8142c4ed47599fde2cb9e88a5c402b9726ce4af9749661b33cfe8203c1fef67a6acfc06fa88bdb615ef4c5324a686d543248", 0xc8, 0x8000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000226da42a355b21b31b06ebc862fb5e347284afe8833d5dd8ac2e0286808a8426f32a99691f673b3428915348fffbcbc1dc2b12b4d31ada343dfd4272bc669b3649fda3c2172fe63307e1655b8b7ef4f71b8e745f1abecc6758a474466d85afd4a8f018db3d37fef2", @ANYRES16=r5, @ANYBLOB="08002dbd7000fedbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2208000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r5, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x23384429a6c86ee9) 13:18:57 executing program 2: prlimit64(0x0, 0x1, &(0x7f0000000280)={0xffffffffbffffff6, 0x5}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f00000019c0)={0x8, {'\x00', 0x1000}}, 0x1006) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 677.716988] audit: type=1804 audit(1599311937.476:1256): pid=947 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/586/bus" dev="sda1" ino=15804 res=1 13:18:57 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:57 executing program 3: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000000080)={0x0}) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000180)=""/249) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x12, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x0, 0x0, 0x0, 0x0, 0x101}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x7ffff00e) 13:18:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x281, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "5e622dc7b2e17a254f7a23c3ca07b3544b2d0a"}) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='\n'], 0x78) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000340)=""/84) r5 = openat$cgroup_ro(r2, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r5, 0x8018457f, &(0x7f00000001c0)=""/112) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x400080, 0x0) openat$cgroup_ro(r6, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) [ 678.058454] audit: type=1804 audit(1599311937.486:1257): pid=947 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/586/bus" dev="sda1" ino=15804 res=1 13:18:58 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x39, 0x400) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'bridge_slave_0\x00'}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRESOCT, @ANYRES32=r1], 0x34}}, 0x0) perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0xc0582, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000011c0)}, 0x38c, 0xb8, 0x4, 0x0, 0xc938, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x16b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0x0) kexec_load(0x0, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) setuid(0x0) socket(0x11, 0x800000003, 0x0) socket$alg(0x26, 0x5, 0x0) 13:18:58 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000240)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 678.129944] audit: type=1804 audit(1599311937.626:1258): pid=944 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/586/bus" dev="sda1" ino=15804 res=1 [ 678.155194] [U] [ 678.177577] audit: type=1804 audit(1599311937.836:1259): pid=972 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/38/bus" dev="sda1" ino=15971 res=1 [ 678.179561] [U] 13:18:58 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x1, 0x2, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x200}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x4240a543) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r5, &(0x7f0000000040)=""/184, 0xffffffc9, 0x40012584, 0x0, 0xfffffe53) splice(r2, 0x0, r4, 0x0, 0x8900000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.events\x00', 0x275a, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x13, &(0x7f0000000100)) ptrace(0x10, r7) ptrace$getregset(0x4203, r7, 0x0, &(0x7f0000000080)={0x0}) ptrace$peeksig(0x4209, r7, &(0x7f0000000000)={0x800, 0x0, 0x1}, &(0x7f00000001c0)=[{}]) 13:18:58 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x40, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000100)={0x0, 0xf6, &(0x7f00000000c0)=[{&(0x7f0000000200)="5500000018007fd502fe01b2a4d180930a06000000a843089100fe803900080008000a0000dc13382d0f10009b7a136ef75afbc9bff7de5cf25fa8e183f5448daa72540d8102d2c55327c43ab82286ef1fdd206523", 0x55}], 0x1}, 0x0) 13:18:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001040000010000000000000000001efb7f148cdbfd59166b423837dc9b07b085d2a689a786055121a52192a851b12319ef19", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) 13:18:58 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x6d, "0d7dda02b251c44767ddfe0190d6a8676eec2b32d269f944c1a1ee4d09fc0ca6d7bc2eb32e19672c59cb42e4176204b30f9874e547be1f81075cc539d744b6cf4fbbfc886a06f756b5194c525b8b8d74201dff3238ef65877a7f7c160cc2731a63cd51f98d372649b3f9b0aa49"}, &(0x7f00000000c0)=0x75) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r2, 0x8}, 0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) openat$cgroup_subtree(r3, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) accept$alg(r3, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d0) 13:18:58 executing program 0: r0 = socket(0x1000000010, 0x80003, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000019007faf37c0f2b2a4a280930a60011000a843dc90f5d769390009002f000000000000001900050000000000000000000004d54400009b84136ef75afb83de448d939e00000000000000060cec4fab91d4", 0x55}, {&(0x7f0000000100)="60ea9a538eca7fb1c76d02d9b4cef4f26dbfb7bf6e3d2c21ca1dc4ebdd0189e193f0e5aa0fa76ae7b3ef205c6199e10fa9b06491fd9a59242bc3ad19457d520adb584153e8148781cd9c5fc513557eae8b1275cec2cae9f744b9dcc36147aa6879730edd53a38aa0320a4df919913467545061e575ca73eb2917ddb1ae6fd0f6824ad01c1f582979038f9aa6223b28c69817de30cb3a051c70a07425ed39c731bfc67a8b1c36429434c3d3a187045a8414b5fbd38f5600e61c2157b44a858a1a0c30551a0dd672150835ca1d59e5b7fe89ebdb2ef02ab7e3ae436b815d553438d25bc94a2233", 0xe6}, {&(0x7f0000000200)="545b384fa7d022cb448bb8fa330be67c4d82b2bacc303164413c601c01dfb444237c31e6e1259aad8a55acc204661df4ebbc63825ed41fb2a7391f5dfcc0c1fe45885fda00e6c9bb3f6e39c5979878f59ab0532a7554fdbbe93daa5313f5ad4cab983c5d452f96b2450e37e0200effdbe5a9f9936833f1a6c8fa476bebf10a90f50db50769a19d8cc091", 0x8a}], 0x3}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) sendmmsg$alg(r0, &(0x7f0000000100), 0x4924924924926ed, 0x0) 13:18:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 678.669290] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 13:18:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xd, 0x0, &(0x7f0000000580)) r0 = getpid() inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0xd8, 0x0, 0x7, 0x401, 0xffffffff80000004, 0x2a7ec810}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @remote, 0xffffffff, 0x0, 0x527, 0x0, 0xfffffffffffffff8, 0x40010}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000440)=@ipx, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f00000008c0)=""/176, 0xb0}], 0x4, &(0x7f0000000980)=""/187, 0xbb}, 0x3ff}], 0x1, 0x0, 0x0) 13:18:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b3eb4a715001adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:18:59 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) keyctl$chown(0x4, r5, r4, 0x0) keyctl$restrict_keyring(0x1d, r5, &(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000240)='cgroup.subtree_control\x00') ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:18:59 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:18:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xd, 0x0, &(0x7f0000000580)) r0 = getpid() inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0xd8, 0x0, 0x7, 0x401, 0xffffffff80000004, 0x2a7ec810}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @remote, 0xffffffff, 0x0, 0x527, 0x0, 0xfffffffffffffff8, 0x40010}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000440)=@ipx, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f00000008c0)=""/176, 0xb0}], 0x4, &(0x7f0000000980)=""/187, 0xbb}, 0x3ff}], 0x1, 0x0, 0x0) 13:18:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe42, 0x9) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x198) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb505000000000000000713edcfbfbd05bbed42f810f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r2, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 13:19:00 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) sendfile(r1, r3, 0x0, 0xce6c) 13:19:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000500)}, {&(0x7f00000002c0)="0d79b84649ffb4491c3cf27e9a36c79b662d7cc71360c973142b316e5865520b10041020a86bbc9d45340fd82d9cf0e808ebdfec9ede914cb72bc8e6491e45eeab1e65bba66a8b161d6d338cd3bff8ca2a5eba5bf105b27dd45c331ad325eb405e01b42aee454babb585253086b22700df282e4676ae3cee3e695bb91d7bc7b7cc0be1425e3d03230c81dc806d7c107084133b011d7ea9317ad7d67b779774f0e5e230158a6ecb8ac82f78796a9187ce30e1a6e27786a672511c60c27e172c0fc2207956c051", 0xc6}, {&(0x7f0000000580)="e922caf6552de08809049ef001ed075b3bc82e446273cc97ad5bd11f0faf5f8d451eab928afa59becd8ac301ba4f1a9507bf75125b692b9d2931775f14e53450f534134f5cfb908a320d113c3f95b9d10a42b9e54538c5023da680bd5460c0e643d5505c1524b9a916df06a091ad7549aaf60370bd746bdbc0289b732f5512f2d0f271f071445e33ed09e4c935e977e02e56ff3c8551235a667ff77965e2084db79247910aad987356d97313bdf8ab0dd4dac1faae7b328d5aa759bb8f6c52e915", 0xc1}], 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980)={0x8, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019dd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00", 0x1000}}, 0x1006) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="2000fa770000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33aeeb26c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a4fb369665af004468bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c96577211b06b47088ebdaf4f641c96", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x4) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x1002) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:19:00 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:00 executing program 0: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) keyctl$chown(0x4, r5, r4, 0x0) keyctl$restrict_keyring(0x1d, r5, &(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000240)='cgroup.subtree_control\x00') ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:19:00 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000340)='ocfs2\x00', &(0x7f0000000380)='./bus\x00', 0x401, 0x9, &(0x7f00000009c0)=[{&(0x7f00000003c0)="6ec4d085ad016396efa6ff3363ce432f6f5dc047b3927866b396f70051086f1a429fd7a079e0e35dada4cbe27da7534dd8d0685032430857d154c3cc4cefce502c04c6f1d218f44e513788ef1046b0661f6778c93a30c840f224043bbbb6de7f202199f551b93c6d1fc4a1de0c07471342bf47396f773616e21050274e1ff75d9f8a1f8dd579b53e", 0x88}, {&(0x7f0000000480)="11c8668115f0489f59b936ab5f75071a24c3b15d2d9e8e544f623770062253f85ccd2ea205041e74da2ec249161d75c9d2d90eb4d17fd9dc918492d1581df34cbe6419cf5e394fc6ca05e786d039b846ca09fc83b29c755b02afa0069958acbe963335de963da675f7eb52b0fdba9bab460497ec4d8a1a6fc131ec8f5b29b1dee201c40e", 0x84, 0x9}, {&(0x7f0000000540)="381730bd5d90a3ba37af9336920d32d4f89948c68ad06c1e305cfcd8ffcc003f83bd801f0d40c02d1066f5d50933ff9551229084547a5ddb786a3c0833f0a8d767b2eb0c7ed6d5aae8962a62d150610857af4474a240cb846f0872ab576141e433d20e8c5a56cff4e2767933081ec727ed5eb7100d8c33a4fb4dcf2b58e96da7ef878521acb637e8853915502812a22354a950d503c79adab910a5754b75ec50909dd3d7f1f9b8a7776dee3f0cc1d26bb1358c97274c26ab1c62aa5081944ef7b4953d954a212da308ec3250aff4481b6fbbe2b3553505f2c89a275210cb98fb3c3f9feb82fd", 0xe6, 0x1ff}, {&(0x7f0000000640)="7ab871095bd231ca50341a7aecb461c93a87f9cc050beeab404c0d7e48bc6e3ccf008731c988d4b7d4fd9ad3784ab042756a4bb95f4fa96dd916cc8a751a02b5c72dd9e27994f2d3e49600f48441327f59375d57220dc33e2e60256ba09f2396a70acb802e3cee3496f29b29a2c884e65809a9b7b48ee4dfa324e8e8560904050cc7b17a61da3227374415ba828bd9728af3394d86613991fa95ce66c37aa920f596ffcd3687cc1db0b1bf6ade901b36a65e0f5f2e5523e934cf0bcae2e36a398d2f9ca41aea33b800e1e6e52456eed22393ff5584f4c6", 0xd7, 0x37}, {&(0x7f0000000740)="8dde07c2a61387aeb8f834d1aa682af47be5c3fdd718e6622066287ca2720308015f929748502c67f8cb943e80694d2091d6e6d32eab3f7f21b3f3577d38f49b92a5ec19c36f077a9e865c4412c255c3a03a3f789392d03a8799102f7bf951480ec3f8", 0x63, 0x1}, {&(0x7f00000007c0), 0x0, 0xb73}, {&(0x7f0000000800)="c0988ac032211b6445721f0eb4600f36050e874d96a3f5932d1109cebf3b89debfdfa86c4585d2bbaffb59dff252704184fa030fff21c0e823094489ca47d088a19a5f389e3aeac3b68a6fc4ad84bda200be150964d1d79ab3228088a8820c4c0d5d770646db213b2ef1248d55a383026e20a8583d42b72143244f6d603d29ff71ba289b765b1aed421d15bf824a", 0x8e, 0x3}, {&(0x7f00000008c0)="081d3449fc6190ea13ffb478ddfb0ce8ce495de34c8b7f9dcbbac6c472f2a073c5dc73f18ec393a6d436849001f8a3d5e70aa10053d4fe561d6d0e2054575ce2cb0475ebcc30a830d03a373af1131066d0d60c395bdec47e83ed95ae988499d5afeb20fb13f48e88aeae7b76bb76a5c239f9ad8a447f0ed7cf4447bf8ae9bedaad0dcfc60faca70881661a24b04fd45a14ebb202", 0x94, 0x5}, {&(0x7f0000000980)="b376b4a60719fe1d6bf270c32aabb2bfea", 0x11, 0x4}], 0x201008, &(0x7f0000000ac0)='\x00') r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x101000, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r0}, 0x8) accept4$x25(r3, &(0x7f0000000240), &(0x7f0000000280)=0x12, 0x80000) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) faccessat(r5, &(0x7f0000000300)='./bus\x00', 0x0) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 13:19:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10000004, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x3}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000140)="25f81e7e4f552b0d1fb134d40de96933fb6cfdbd3ea3a45eede27c41621c26ea2134ffd7ecdc88632f771e65d59900000000000063971ae838158902f48c60b1e2ef02c2e990db570bc2a2e99321d02868b88c90803c468f3751d646e12365b88600907858350b18734712679466e0aa8dd3512326f9f92a", 0x78) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xfffffffd, &(0x7f0000000300)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:00 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='squashfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80800, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000280)=0x4) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:19:00 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x150, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0xeaf0}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x81}, {0xc, 0x90, 0x401}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x800}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xff}, {0xc, 0x90, 0xfffffffffc25a466}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4800}, 0x20004001) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 13:19:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0xffff8001, 0x5, 0x0, 0x8, 0xfffffffffffffffd}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x7, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x33, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRESHEX=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:19:01 executing program 3: prlimit64(0x0, 0x1, &(0x7f0000000280)={0xffffffffbffffff6, 0x5}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f00000019c0)={0x8, {'\x00', 0x1000}}, 0x1006) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:19:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:01 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) copy_file_range(r3, &(0x7f0000000240)=0xfffffffffffffffd, r4, 0x0, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 681.204637] kauditd_printk_skb: 13 callbacks suppressed [ 681.204646] audit: type=1804 audit(1599311941.146:1273): pid=1153 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/590/bus" dev="sda1" ino=15813 res=1 13:19:01 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 681.627342] audit: type=1804 audit(1599311941.296:1274): pid=1162 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir046460605/syzkaller.ZkCXzK/640/bus" dev="sda1" ino=15858 res=1 [ 681.669969] audit: type=1804 audit(1599311941.546:1275): pid=1161 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir297428485/syzkaller.h3wF80/221/bus" dev="sda1" ino=15868 res=1 13:19:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x4f) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ebfd854abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c345018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db921c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a5ed2a19fe78d7b8264d9352e48c9f2de0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac7ae2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d295f9ce036c791b61fe0d5983a6a34b09f3286a916ab05fa9483a274ef1a6851624b0ea349c56f625ae539c5b21d81000000006955d61e36ea73b60f20c621a1e585c1eb082078b2bae4dacbe34fda63ca9bd6bdfa829dedfdc2f800b6e981cd8fe44f41e1edfe9a66b36ec67c59ac500602ce800778ccfac4fe50b32ed3e84cbed8c22c95f9d18d68d8852a1eb11477b5b944cc06125ecc0bdc767d3dd7938e9435", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 682.069174] audit: type=1804 audit(1599311941.726:1276): pid=1177 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/496/bus" dev="sda1" ino=16410 res=1 13:19:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 682.098739] audit: type=1804 audit(1599311941.906:1277): pid=1180 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/41/bus" dev="sda1" ino=15820 res=1 13:19:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d41da1adddfb420777d151ef9ba14d05de8bbec2056aa6049240c483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657d0ac279f7ba2769b217ce630d5014c03dfa1dcc71bb57070266b6263837fd033", @ANYRES32=r3, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r2], 0x20, 0x4810}, 0x40400c4) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 682.162662] audit: type=1804 audit(1599311941.936:1278): pid=1183 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/590/bus" dev="sda1" ino=15813 res=1 13:19:02 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e20,mmap,aname=\\,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c66736e616d653d6367726f75702043a28fa14a36fc32002c736d61636b6673726f5d743d53212c00"]) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000300)=""/5) close(r2) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) [ 682.248720] audit: type=1804 audit(1599311941.936:1279): pid=1183 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/590/bus" dev="sda1" ino=15813 res=1 [ 682.279687] audit: type=1804 audit(1599311941.956:1280): pid=1184 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/590/bus" dev="sda1" ino=15813 res=1 [ 682.282277] 9pnet: p9_fd_create_tcp (1199): problem connecting socket to 127.0.0.1 13:19:02 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000a00)=""/4096, &(0x7f0000000100)=0x1000) gettid() write$binfmt_script(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r1], 0x141) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80084, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$UI_DEV_DESTROY(r3, 0x5502) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0xfe00, 0x0, 0x0, 0x3, 0x2, 'veth0\x00', 'macvtap0\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @broadcast, 0x0, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @private, 0xffffff00, 0xffffffff, 0x0, 0x7, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x7f, 0x7ff, 0x6, 0x5, 0x0, 'ip6erspan0\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@arp={@rand_addr=0x64010102, @multicast2, 0xff000000, 0x0, 0x0, 0x0, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev}, 0x0, 0x320, 0x7f, 0x7, 0x0, 0x0, 'dummy0\x00', '\x00', {}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1000, &(0x7f0000000340)=ANY=[]) r4 = socket$inet6(0xa, 0x80000, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 682.524654] audit: type=1804 audit(1599311941.956:1281): pid=1158 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/590/bus" dev="sda1" ino=15813 res=1 13:19:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 682.679156] audit: type=1804 audit(1599311942.266:1282): pid=1204 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/591/bus" dev="sda1" ino=16226 res=1 13:19:02 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x101080, 0x0) sendfile(r1, r3, 0x0, 0x80001d00c050) [ 682.780527] 9pnet: p9_fd_create_tcp (1216): problem connecting socket to 127.0.0.1 13:19:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="17251bd8b986b3121859b1374b1ebf716364", 0x12}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abfdcd4e57aefa9dfb63c72a2c40473af1efd2688c242ac5c28d39913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d5cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b3013edcfbfbd05bbed427010f9e19842285924d4adda55133eda096201d07ba3815bf7469eb6bf755a99fd2843413990f5665dc43049d3314fb5961d34d0e78b22b45648fb5627094743915be0684251da667630e49aac6d370221d0b5f1a81080883fa6181e62bd740985bd7f9c5f9a755715bbcb4b39f5adbe3119f4b1ecb8abac92ac074ffd86ea27bdadb2db4a36eca30659a8ec4e58810d03ffa57879b60cc945ee6f725bef7b000000000000000000ba91f9327937a25ef7c6ea7a50b5f07bd097afe16d9d0e0c22ff5ab55b8f24f245eafcb18ac8", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:03 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000a00)=""/4096, &(0x7f0000000100)=0x1000) gettid() write$binfmt_script(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r1], 0x141) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80084, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x1}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$UI_DEV_DESTROY(r3, 0x5502) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0xfe00, 0x0, 0x0, 0x3, 0x2, 'veth0\x00', 'macvtap0\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @broadcast, 0x0, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @private, 0xffffff00, 0xffffffff, 0x0, 0x7, {@empty, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0x0, 0xff]}}, 0x7, 0x7f, 0x7ff, 0x6, 0x5, 0x0, 'ip6erspan0\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@arp={@rand_addr=0x64010102, @multicast2, 0xff000000, 0x0, 0x0, 0x0, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev}, 0x0, 0x320, 0x7f, 0x7, 0x0, 0x0, 'dummy0\x00', '\x00', {}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x1000, &(0x7f0000000340)=ANY=[]) r4 = socket$inet6(0xa, 0x80000, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 13:19:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r2, 0x4, 0x46000) lseek(r2, 0x4200, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 13:19:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x40) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000100)="0c5d6da6d247b0ff6131668d052cac23403fd80eca9200b6ff8c491b31003a558a7f33b940e02c9319c69b6b4bd57342460b9d1e8d842b56d0da6cbea094223ca3d79edd3249e91311cfac26b85c4f4b78db18a80c1c38048e7ad26ba5b109980648332b32647e6891d49790f0e2f87608054fb01ef304b4e97935d913e3d6f3e97c428b2bd40f30ba816a2ba28d73cbcbdd87bb81921a49e8aab7", 0x9b}, {&(0x7f0000000080)="bdc8655a8808e57213e9924cd15e9445ed60e53be2dc1688990b361c9a811370f1", 0x21}, {&(0x7f0000000240)="b41c3ee3328b97d8f627ba0add8b4b3733d2715ef53e39e7d17096b2b01a5148faa0c1936bfa2fdb753a58267039ea8cb976d910c8f8b7fdd19583301300df0bc45da5f843e54fb63a1c22cc09040eccf493b6e5109b35d8867c0b3b18b4b03929af949c7b01531894192f7e81ed61fe5d6fdcb145a91c3a8b441219b4f517724a6489aefc730df20516874498304b66bfbf9074a0460138f1d3b692668608ea92114aff22f7098e09d0ab3e328a271f757d6ebbe2ec66e7dae97aa1856d6cca08fa51c6e931d14cd5a5f894b70dba57", 0xd0}, {&(0x7f00000001c0)="8ae9926b11416bb442a2cb1dcbb02260bba6103722f3716a13357e1993a8208bd6ce78ca165541", 0x27}, {&(0x7f0000000340)="6bb6f1b2344adffbe004fddbedd052eb0961d874df81eeb74aa933826ebe0b27b5d56deb51d72c06e1994219d106d2ce999c3d9e4b6d10f169cedc93e19d876aa0a8c5a249e155fda3f21787ff471e13135b41146e48", 0x56}, {&(0x7f00000003c0)="d5952c377766d5e4fa6f307b87d97f53ad6ff4339bdb5df9c372563020f6471e9b1ea81fe0f93be79b4d66521c19c347fd4ac2d09ec500169982e1b4edd88336a20ea5716c2de0a48eb90c92064173017768c6f7ff63b6a6c6e1f95ca34ab5218353aa3bd1e593bd095bd9b55e9b4efbb2025326beeee4cc780ae9967e7d1db90c3e0a76391bd15ae558352ea6119dfa611837f9c7038d1ba63673bd3f98bf348b0a8e992274ac3bc64dbedb840a3f604c62a64623ae495e7105a2d1274e93e45a39d6eed1a646d485a4649fb391", 0xce}, {&(0x7f00000004c0)="145e24fc31d7f3925d296ce4f175ef8c508852f2c49b34f4244583be81f983b6a03b28268ae84fdc8aa2b9d17a6034c08c999b7038182ae4105d53527a4324a6cbbde74155f2211c2e42a2da7c17b83a7fe08ae54cf6ae41bd1217c48bf076fa115801465032267455c44063e5117a45cedf4500b1c6e0215edf86ad30bdd3ecdc2bc83d7532ee71834cc27816dca8dafee5d132181867dff0908df91e4c093a176cd9b952d3f4bb67cab666a4446a363e47653f73e3fc3ec36e72447bf12bac115592bad24b1dc0a517c5a2", 0xcc}], 0x7) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f0000000680)={0x1000, "73a30e082006bf4675963344469f6611f48021617e8d40c981239cfe15643f6b", 0x1, 0x70a0, 0x4, 0x80000, 0x3000100, 0x2}) read$rfkill(r2, &(0x7f0000000040), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000010", @ANYRES32=0x0, @ANYBLOB="ff7f000011000000140012800a00010076786c616e0000000400028008000a0036459cdb26"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x6800) 13:19:03 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:19:03 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x13, &(0x7f0000000100)) ptrace(0x10, r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdc02, {{}, {}, {0x8, 0x2, 0x15}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004091}, 0x20000800) ptrace$getregset(0x4203, r1, 0x0, &(0x7f0000000080)={0x0}) perf_event_open(&(0x7f00000031c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) write$binfmt_aout(r0, &(0x7f0000001540)=ANY=[], 0x14) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', 0x0, 0x5, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@alloc_mode_def='alloc_mode=default'}]}) creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000013c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f00000003c0)={r4, 0x800}) 13:19:03 executing program 3: sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xaea, 0x9, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2f6) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x10000045, 0x0, 0x3}, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000100)={{}, 0x9, 0x7, 0xe3}) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8000000200036150, 0x800007c, 0xffffffff, 0x0, 0x0, 0x4000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x280100, 0x0) 13:19:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:03 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) sendto$inet(r1, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x20040001, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 13:19:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x6d, 0x5, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r2, @ANYRESHEX=r2], 0x20, 0x4810}, 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 13:19:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000fc9a2cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101ad95a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d38eaa6f884a6f0121167428bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693868410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x8) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:19:04 executing program 1: syz_mount_image$nfs(&(0x7f0000000840)='nfs\x00', &(0x7f0000000880)='./bus\x00', 0x84, 0x1, &(0x7f0000000980)=[{&(0x7f00000008c0)="f32569ec9e6fb448bd720010af11407226046eeb5487359a60d4744715f750221aa918a4a8f92edf71999d6a88aaffe7c9dafd92deef32ec675fafc25d6f4bca31669713ff4e56c7265d32f942fbf63eb8e413310da4ebbb05b16e651f645e3e989e912230ee7b6f1a9dab8222083725ee6a94e57ad241289f2a633e512ffac9c9ae40a503996b14bbc5", 0x8a, 0x7}], 0x808040, &(0x7f00000009c0)='\',-\x00') r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/108, 0x6c}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000580)=""/121, 0x79}, {&(0x7f0000000a40)=""/102400, 0x19000}, {&(0x7f0000000680)=""/62, 0x3e}, {&(0x7f00000006c0)=""/152, 0x98}], 0x9, 0x8, 0xfffffffc) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000a00)=0x100) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) ioctl$int_in(r4, 0x5421, &(0x7f0000000640)=0xffff) 13:19:04 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0x80, 0x3f, 0x4e}) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) 13:19:04 executing program 0: creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) renameat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') flock(r1, 0x7) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100)=0x6974fb51, 0x4) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2f6465762f6c6f6f70300092f634d495f57dab6adfd7fc82fd57e37b385446ccf9dcbb09ced07c10f3a7d240403246022067192b1f99f1fe29f4003c22aba2a81b986eaf1a63bb7a0fc0e0e345e8a24c383141788794201cde81051b01f43357392f30ad89fe2738e8b184abdce5e71ca78ba53d94e4427240a90107d0504b095187"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) 13:19:04 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10) connect$can_bcm(r0, &(0x7f0000000140), 0x10) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420e91326c000000580f0200000000e24c1e670000000000ffffffff000080", 0x38}]) 13:19:04 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000280)=""/135, &(0x7f0000000340)=0x87) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 13:19:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CHAR_RAW_ALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000100)) mremap(&(0x7f0000c88000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507040000000000000000000010", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="380000002400070500ee304f7c00000000a2a300", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x48, 0x28, 0x417, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x3}}}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000480)={@ipv4={[], [], @private=0xa010102}, 0x6e, r2}) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, &(0x7f000000a000)) r3 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000400)={0x20}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x1c, 0x52, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4015}, 0x400c0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x7f, 0x401, "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", 0x0, 0x40, 0x7, 0x80, 0x7e, 0x2}, r4}}, 0x120) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010000104000100523a89ff220d2bd57d71e1681723428daa200b9fdd2dab066201a5f3000000f6e8bba5", @ANYBLOB="b1851c8c80b1027ebd1fa946ce8e3fb8bfddd52a8f0f4aee3b01ced0adfc607b847b91b47859c661b28ea784c842df10b477531d9cb70fd086399fffcf8c6b53b9bc89d84c7114fd5e328018822170565b5a0500000054c563884cbe13ead6c7c0ae4a3ca36b77b8b9bb4717d969d1", @ANYRESHEX], 0x50}, 0x1, 0x0, 0x0, 0x2000080d}, 0x8040) 13:19:04 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000ecdf40e65cc780220000000000000000000000000000000300000000000000000000000004000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000100258d7a3500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a314000000000000000000000000000000000030000cf0a000000000000000000000900000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaba86b97eec0b2bed1ee23364b15e79a675faf86c71700a811015775dae615afb066671aa93075ab27d378dd253981b617c082708aa1a5393f008057411c63070ec83e21cbcb19b57238a74faa7c617a4c056928ff31dc7eb5cbea6365dbfa34a55ed149660ce"], 0x12e) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x11) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000003c0)) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x64010101}}, 0x20) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) 13:19:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 685.008070] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 685.011497] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 685.059326] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 685.113415] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on %z5 [ 685.116376] Error parsing options; rc = [-22] [ 685.160973] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 685.399840] Error parsing options; rc = [-22] 13:19:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="2ed6ac06b4c2fe666aae3cf87081e83f1e4713868010a9e0aa4048c205c471251f62bab18374ba5028e3d852", 0x2c}, {&(0x7f00000003c0)="9eb3fe8508f17bad4e9851d65626ffd22f06520c707e97b6aafb508000e37de5a4582952204fb0b339d135381ce51e104bf9f9f0b8de2b639c2092f2e4407fa99616aa4e8be1c33f933edf87d6145dd2033782d655df9b111262d024af42a5931e66ba33c10b0742f1d5c279a4d4585d4f33857c3a6f20ac9ffb52feb1187bfc33ab8ee7e03714c74cfa7da0f8e28ec7c167e3d87cef01dbf05a2125f0434fadbadde6c9d976dc8f67b85b51a9127770b662aeea64181320b63c1d6d12ccdab29b87a3b3ff3fc0dadb13cbd10bb57c650dddd25396402ee6b42ae9d3fee2e2b4e36375d51d6c37e0af6470d5102d618c9f", 0xf1}], 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRESDEC=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:19:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x2006, 0x0, 0xfffffeff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000300000000000000000000001252e5685b00", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000002000020000000000000000000000000000000000000000000000000004000200"], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e276ac012a8f6e2e2aba000000012e07b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ec3400000000000000f5ff1b0816c456e0ea0001000000000000004974000000001c000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="5000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d0000002000020000000000000000000000000000000000000000000000000004000200b57158d6e7afc341d8748734d9ad8eeaaeb9b449ab3ccfac16d6b3d9d3ee10bc3333321d5b61c69cf67486bec370259b8cc57f3901ebf6f74d9b"], 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)=ANY=[@ANYBLOB="e095fd00", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250f0000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766972745f7769666900080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="140009001567310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="180001801400020076657468305f746f5f626174616476001c00018008000100", @ANYRES32=r0, @ANYBLOB="080003000200000008000300020000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="08400100", @ANYRES32=r2, @ANYBLOB="140002006970766c616e31000000000000000000140002006e65747063693000000000000000000008000300030000000800030003000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4005020}, 0x1400c145) chdir(&(0x7f0000000000)='./file1\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x8802, 0x88) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf25050000000809340000000000080032000400000005003300020000000a000900000000000000000008002c008000000005002900010000000500380001000000"], 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x400e030) write$9p(r4, &(0x7f0000001400)="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", 0x2e5) sendfile(r4, r5, 0x0, 0x1c500) 13:19:05 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./bus\x00', &(0x7f0000000040)='aio\x00', 0x2014c50, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) socket$inet_sctp(0x2, 0x5, 0x84) openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x10200) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x9, 0x558, 0x3, r4}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0xdee, 0x1, 0x8002, 0x2e, 0x5e, 0x8, 0x0, 0x2, r4}, 0x20) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) 13:19:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000000140)=ANY=[], 0x20, 0x810}, 0x4000080) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x2) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 685.962156] netem: change failed 13:19:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 686.402342] kauditd_printk_skb: 20 callbacks suppressed [ 686.402351] audit: type=1804 audit(1599311946.336:1303): pid=1403 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/500/bus" dev="sda1" ino=16233 res=1 13:19:06 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='qnx4\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000300)={{0x87, @multicast2, 0x4e23, 0x2, 'lblcr\x00', 0x18, 0x163, 0x53}, {@empty, 0x4e21, 0x10000, 0x4, 0xfffff1ef, 0x8000}}, 0x44) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008840}, 0xc080) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000380)) 13:19:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:19:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x4) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000000000000000e026c089d22795b62ac1b42a4d70431466b29a1fedc07a31349e13a417b99663cbafeda259193d0e4a1bf173678a8ac445658d84e14fbb28ed1bc5127c6cd8330000", @ANYRESOCT=r1], 0x24}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000580)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x363) syz_open_procfs(r0, &(0x7f0000000200)='net/nf_conntrack_expect\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000001a40)=ANY=[@ANYRESDEC=r0, @ANYBLOB="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", @ANYBLOB="0000070000000007000000d74319004c0068000018049078e000237dac1e0001e000000100000040ac1e0001ac14140bac1414aaffffffff0000000044"]}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x481, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id'}, 0x2c, {[], [{@obj_type={'obj_type', 0x3d, '%(+'}}]}}) [ 686.775835] netem: change failed 13:19:06 executing program 3: prlimit64(0x0, 0x4, &(0x7f0000000280)={0x20000000009, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcca}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, r1, 0x0) setpriority(0x2, 0x0, 0x9) clone(0x84168903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0xed) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) [ 686.975542] audit: type=1804 audit(1599311946.376:1304): pid=1400 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/45/bus" dev="sda1" ino=16403 res=1 13:19:07 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000240)=0xfffffffe) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x5, 0x0, [], [{0x1ff, 0x7, 0x8, 0x4, 0x4, 0x7}, {0x2, 0x3faca27e, 0x7f45, 0x8, 0x6, 0x3ff}], [[], [], [], [], []]}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x800, 0x8) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000480)={0x7, 'ip6erspan0\x00', {0x8}, 0x6}) close(r3) openat$cgroup_subtree(r2, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d0) 13:19:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) prlimit64(0x0, 0x2, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x43, 0x0, 0x9, 0x0, 0x20000000000, 0x0, 0xfffffffd}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)) setresgid(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f00000025c0)=""/201) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000002580)={r4}) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x30, 0x1, 0x6}, 0x0) setgid(r2) syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x3, &(0x7f0000002400)=[{&(0x7f0000000380)="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", 0xfc, 0xffff}, {&(0x7f0000000200)="737aded897d2c019004219e974b5", 0xe, 0x2}, {&(0x7f0000000240)="ee0ff32ef0cfa5cec1579a586ab779dcb7b165fe694da2a48cb14ac9c721b452feea71281a1296", 0x27, 0x7}], 0x200048, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x105102, 0x0) 13:19:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc906, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffffffffff00) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963867dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 687.160505] audit: type=1804 audit(1599311946.396:1305): pid=1404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/594/bus" dev="sda1" ino=15858 res=1 13:19:07 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000002c0)={{r2}, "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"}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) [ 687.297366] audit: type=1804 audit(1599311946.737:1306): pid=1415 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir297428485/syzkaller.h3wF80/229/file0" dev="sda1" ino=16234 res=1 13:19:07 executing program 3: ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @aes128}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x800, 0xffffffab) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="a80000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000007800128009000100766c616e0000000068000280060001008809000004000380580003800c00010000040000020000000c00010007000000ff14bf3d0c00010001800000090000000c00010006000000d70700000c00010009000000810000000c00010000000100000001000c000100000000800900000008000500", @ANYRES32=r3, @ANYBLOB="08000a00b6e72b4458577459765bd0793ce7ad72f4674cdef6d1659c81442b4508aa7d4c2255498941855ebfc1b005112c3585231f9d5bbb01882761537f62a08a1acba4efb8988054a4477ee865", @ANYRES32=r3, @ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x54}, 0x18) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvram\x00', 0x600000, 0x0) sendto$inet(r5, &(0x7f00000003c0)="55c950fdd9c64a0ac48f10fb6f3c1710bd4d742be28b70d0b4b7e30abf345886d5445a3900be03c4da9de7589e6bfa770d04a85ec894a6a0aad0ee868f09fba545f6feb888cdf52b2ab5ce5bb91e57bc4c0205e4f9daf96041534a764ef4793be38b", 0x62, 0x0, &(0x7f0000000440)={0x2, 0x4e20, @multicast2}, 0x10) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2080, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000280)) [ 687.402997] audit: type=1804 audit(1599311946.777:1307): pid=1422 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/595/bus" dev="sda1" ino=15809 res=1 13:19:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x339e003d24ea507) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:19:07 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2}}, 0x2e) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000002c0)={{r2}, "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"}) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0xfffffff5}], 0x400000000000085, 0x0) 13:19:07 executing program 1: r0 = gettid() syz_open_procfs(r0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x14, 0x1, 0x3, 0x201}, 0x14}}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) openat$cgroup_subtree(r2, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d15, &(0x7f00000000c0)=0x5c) sendfile(r3, r4, 0x0, 0x80001d00c0d0) [ 687.838993] audit: type=1804 audit(1599311947.037:1308): pid=1395 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/45/bus" dev="sda1" ino=16403 res=1 13:19:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)}, {0x0}], 0x3, 0x0, 0x0, 0x4810}, 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) [ 687.980750] audit: type=1326 audit(1599311947.167:1309): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=1436 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 688.133289] audit: type=1804 audit(1599311947.457:1310): pid=1457 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/501/bus" dev="sda1" ino=16429 res=1 13:19:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:08 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) socket$inet6_udplite(0xa, 0x2, 0x88) [ 688.330610] audit: type=1804 audit(1599311947.507:1311): pid=1426 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/595/bus" dev="sda1" ino=15809 res=1 13:19:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 688.511675] audit: type=1804 audit(1599311947.577:1312): pid=1456 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/46/bus" dev="sda1" ino=16418 res=1 13:19:09 executing program 2: prlimit64(0x0, 0x5, &(0x7f0000000280)={0x200000009, 0xffffffffffffffc1}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="f7458882226d81f377b52368bea8cb52b34219dd284f3eac1edb25654cb4f4", 0x1f) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x3f) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfb0d5bf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3475368eb53cb9b660b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c96570000000000000000000085647831c13d2e9e59c7a481cd9f99d0469573", @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r2, 0x4, 0x46000) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000200)) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x8400fffffffb) sendfile(r1, r1, &(0x7f0000000100), 0x8080ffffff7e) 13:19:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)}, {0x0}], 0x3, 0x0, 0x0, 0x4810}, 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x0, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) 13:19:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:09 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x9, 0x558, 0x3, r4}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, 0x4) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:19:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x84007ffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:10 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:19:10 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setuid(r1) ioprio_get$uid(0x3, r1) 13:19:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x2005}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20bf736ed837a49343e42901ab4faa8c5a00ff7f0000000000f60279aa9500014000005e43f13979236b8d48690800000000b0012cc0489635e7993391dfd66ab849c55479e90092ab362f2938e6692db7d7a201ed0e2cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866042c7efc68c9cb0027786bea000000c22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049244e4", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfffe, r3, &(0x7f00000002c0)="e52b597145cdc990f8d411caa69d56a52f32b08c5dbc7aee0884ca5f757427f0d7cebb6b07abab0520b668c476cc87a76eb6c925f24ba37c23c22d10f1c5da314c6bae6f688dd62f85694a92ca0d5fe11a3dfb1b75b6329c23c30bab05396bfd51db7655838cfb72e70d583814bdb0d2a2cbdd7a962619f796968548", 0x7c, 0x0, 0x0, 0x1}]) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:19:10 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0xfc, 0x10, 0x705, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x2}]}}}, @IFLA_EVENT={0x8, 0x2c, 0x1}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET6={0x64, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={[], [], @local}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "63449b7b1e494f47bf956b401d603ed676"}, @IFLA_MAP={0x24, 0xe, {0x5, 0x5, 0x9, 0xda, 0xf7, 0x57}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}, @IFLA_TXQLEN={0x8, 0xd, 0xfffffffc}]}, 0xfc}}, 0x0) 13:19:10 executing program 1: getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x17, &(0x7f0000000100)={0x0, 0x2000}) r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x2001, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x119) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x1) write$P9_RLCREATE(r3, &(0x7f00000002c0)={0x18, 0xf, 0x1, {{0x20, 0x3, 0x1}}}, 0x18) close(r2) r4 = fcntl$dupfd(r2, 0x0, r0) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000240)={0x1, 0x1, @stop_pts=0x1}) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0xce001, 0xe1) r6 = dup2(r1, r5) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000300)={0xf000, 0xc000}) ftruncate(r5, 0x200004) sendfile(r2, r5, 0x0, 0x80001d00c0d0) 13:19:10 executing program 0: write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0xffffffffffffffff) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'ip6gre0\x00'}, 0x18) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000200)=0x8) syz_open_procfs(0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="50000020bae7beeeab0000", @ANYRES16=0x0, @ANYBLOB="00032abdffb0ea87ac1b70e394db5c92070000003c000180080003000900000076657468315f6d616df4d6834e1c6d4a606376746170000000140002007665746a69cf066a06d19ec6c74184bad134d812513089dea10d609aaae0e0c56420a5dcbe5874f5d017fe99481756f15caf0d625970f8fcd980c28baabc1d1a"], 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x2000c001) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00', {0x72080000}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) readv(r2, 0x0, 0x0) ioctl$CHAR_RAW_PBSZGET(r2, 0x127b, &(0x7f0000000100)) 13:19:10 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80103, 0xcd) close(0xffffffffffffffff) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d0) 13:19:10 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 13:19:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x84007ffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 691.412475] kauditd_printk_skb: 20 callbacks suppressed [ 691.420069] audit: type=1804 audit(1599311951.347:1333): pid=1638 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/49/bus" dev="sda1" ino=15691 res=1 [ 691.604700] audit: type=1804 audit(1599311951.447:1334): pid=1635 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/598/bus" dev="sda1" ino=15797 res=1 13:19:11 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010001f0774000000dfdbdf258001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002811200001c0012000b0001006d616373656300e105000a0005400a01800000000000000000000022c8ca37000000000000"], 0x50}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000000)=0x4) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 13:19:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRESOCT, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x84007ffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x2, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92baf33a06b36c5ec15108000000f3477368eb53cb9b663e6b621392bb9f3200000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8ab631e693846410848ca704ca51b1c9657daad1c4d079dfffbfa171abd263ab3", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:19:11 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e23, 0x4, @mcast2, 0xc4a3}, {0xa, 0x4e23, 0x8, @local, 0x7}, 0xf801, [0x1, 0x6, 0x3, 0x18, 0xd73, 0x9f7, 0x1, 0x5]}, 0x5c) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) 13:19:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 691.835356] audit: type=1804 audit(1599311951.777:1335): pid=1660 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/599/bus" dev="sda1" ino=15795 res=1 13:19:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@xdp, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x3, &(0x7f0000000480)=""/52, 0x34}, 0x2}, {{&(0x7f00000004c0)=@caif=@dgm, 0x80, &(0x7f0000000840)=[{&(0x7f0000003bc0)=""/4110, 0x100e}, {&(0x7f0000002a00)=""/84, 0x54}, {&(0x7f0000000740)=""/212, 0xd4}, {&(0x7f0000003a00)=""/227, 0xe3}], 0x4, &(0x7f0000000880)=""/8, 0x8}, 0x8}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000002a80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:12 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x9, 0x558, 0x3, r3}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x8}, &(0x7f0000000240)=0x8) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 692.147463] audit: type=1804 audit(1599311951.887:1336): pid=1663 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/505/bus" dev="sda1" ino=15797 res=1 [ 692.454044] audit: type=1804 audit(1599311952.347:1337): pid=1679 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/50/bus" dev="sda1" ino=16454 res=1 [ 692.590061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 13:19:12 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 692.638533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.657311] audit: type=1804 audit(1599311952.587:1338): pid=1664 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/599/bus" dev="sda1" ino=15795 res=1 [ 692.715302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.738629] batman_adv: batadv0: Removing interface: batadv_slave_1 13:19:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979236b8d48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 692.766469] device bridge_slave_1 left promiscuous mode [ 692.807870] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.816519] audit: type=1804 audit(1599311952.717:1339): pid=1674 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir412156832/syzkaller.1UboLD/253/bus" dev="sda1" ino=16450 res=1 13:19:13 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000300)={0x1, 0xabb, 0x100}) mount(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000dc0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c050000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="2c01028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000104000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400faffffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040081050000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="280102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400070000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="3402028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000004000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400c807000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000008040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400ff01000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004001020000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040004000000"], 0x57c}, 0x1, 0x0, 0x0, 0x110}, 0x40) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f00000000c0)) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)={0x2, 0x4, 0x4, 0x10, 0x8, {0x0, 0xea60}, {0x1, 0x0, 0x2, 0x7f, 0x6, 0xf0, "2fe1bf3b"}, 0x4, 0x1, @offset=0x7, 0x5}) openat$cgroup_subtree(r3, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) openat$cgroup_ro(r3, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x0, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80000000) [ 693.147106] device bridge_slave_0 left promiscuous mode [ 693.150568] audit: type=1804 audit(1599311952.827:1340): pid=1696 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/600/bus" dev="sda1" ino=15743 res=1 13:19:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000140)={0x38, 0x6, 0x800004a, 0x0, 0xfffff5c6, 0x0, 0x100000000, 0x0, 0x0, 0x2}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 693.202623] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.282564] device veth1_macvtap left promiscuous mode [ 693.328342] device veth0_macvtap left promiscuous mode [ 693.337508] audit: type=1804 audit(1599311952.887:1341): pid=1697 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/506/bus" dev="sda1" ino=15724 res=1 [ 693.355656] device veth1_vlan left promiscuous mode [ 693.448577] device veth0_vlan left promiscuous mode [ 693.503128] audit: type=1804 audit(1599311953.437:1342): pid=1713 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/51/bus" dev="sda1" ino=16458 res=1 13:19:13 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 693.733649] bond1 (unregistering): Released all slaves [ 694.063868] device hsr_slave_1 left promiscuous mode [ 694.116779] device hsr_slave_0 left promiscuous mode [ 694.176810] team0 (unregistering): Port device team_slave_1 removed [ 694.201993] team0 (unregistering): Port device team_slave_0 removed [ 694.223403] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 694.256623] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 694.348195] bond0 (unregistering): Released all slaves [ 694.383310] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 694.476317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 694.528422] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 694.540333] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 13:19:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000002c0)={'broute\x00', 0x0, 0x4, 0xd4, [], 0x1000000000000252, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/212}, &(0x7f0000000040)=0x78) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3214, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00160002000000740004140e001100024d0000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 696.756512] IPVS: ftp: loaded support on port[0] = 21 [ 696.853382] chnl_net:caif_netlink_parms(): no params data found [ 696.904615] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.911115] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.917923] device bridge_slave_0 entered promiscuous mode [ 696.925406] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.932027] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.938840] device bridge_slave_1 entered promiscuous mode [ 696.958245] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 696.966978] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 696.987312] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 696.994375] team0: Port device team_slave_0 added [ 696.999698] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 697.007072] team0: Port device team_slave_1 added [ 697.024477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.030759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.056070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.067001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.073343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.098563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.109438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 697.117220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 697.139853] device hsr_slave_0 entered promiscuous mode [ 697.145479] device hsr_slave_1 entered promiscuous mode [ 697.151651] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 697.158597] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 697.226542] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.232907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.239461] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.245836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.276614] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 697.283176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.291506] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 697.299551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 697.307818] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.314944] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.325571] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 697.331912] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.340113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.347864] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.354262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.364806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.372587] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.378971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.399506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 697.409471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.421159] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 697.428130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.436052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 697.443973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 697.451592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 697.459716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 697.466781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 697.478789] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 697.486318] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 697.493694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 697.505108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.557947] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 697.568138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 697.594744] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 697.602446] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 697.608930] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 697.618680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 697.626906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 697.634278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 697.643280] device veth0_vlan entered promiscuous mode [ 697.653183] device veth1_vlan entered promiscuous mode [ 697.658942] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 697.667623] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 697.679364] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 697.689034] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 697.696306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 697.703962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 697.714211] device veth0_macvtap entered promiscuous mode [ 697.720227] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 697.728576] device veth1_macvtap entered promiscuous mode [ 697.738397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 697.747576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 697.756730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 697.766708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.776268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 697.786022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.795170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 697.804924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.814467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 697.824204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.833381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 697.843135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.853439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.860849] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 697.867758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 697.877276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 697.886212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 697.896251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.905937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 697.915737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.924923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 697.934694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.943968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 697.953868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.963034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 697.972931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.983280] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 697.990146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.998215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 698.006458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 698.301119] kauditd_printk_skb: 3 callbacks suppressed [ 698.306626] audit: type=1804 audit(1599311958.237:1346): pid=2001 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir152326610/syzkaller.HThVte/0/bus" dev="sda1" ino=16465 res=1 [ 698.790777] Bluetooth: hci5 command 0x0409 tx timeout 13:19:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13979230f9f48690800000000b0012cc048963515128d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a201ed862cac92bef33a06b36c5ec15101adb2a1f3477368eb53cb9b663e6b621392bb9f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ef9ba14d05de8bbec2306aa604d8a3631e693846410848ca704ca51b1c9657", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) 13:19:18 executing program 1: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000000080)={0x0}) syz_open_procfs(r0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x2, 0x10}, &(0x7f00000002c0)=0xc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x10) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 13:19:18 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x5, &(0x7f0000000740)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000001a00)="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", 0x1000, 0x6, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x2c6, r1, &(0x7f0000000140)="06c9a05aef8881d16319b9", 0xb, 0x3f4, 0x0, 0x2, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x71db, 0xffffffffffffffff, &(0x7f0000000300)="0a0050e43eb31218e9c031b677f9999510207bb33746f4cb2bbe5095992c1c85783e6ba0bfeedb416a12c2d7f5122bf4e08bbd3ce8d0eb5244dfa8593589012bd43189fbd9c33eeabde17524252a8e7ecbd8b3bf2a8dd275fb6415b65e5ede77acc636c326831bdc117796d8b7a59b0bc3ccb0d9bfa580473076ff601147925c9f246cac38552c363984b7073dda7d6844b87ddbb78533453e02cba8a29dfdcd5b2f6aa488a9e81c37dd33e05feeda5d278ac3780d8a468f95609eb5dd6f24493041e60934d65bbd0867f81c8b2464e175e2e6d5312eed177cd2516aaee416ed061e41430707003aaa0d", 0xea, 0x5, 0x0, 0x3, r4}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2, 0x40, r6, &(0x7f0000000440)="04e0bf846c643e1fc79871f329433c941a73e04c18efd6555b377e788265f632a6e3ce04d223415f316d0d91d8baf62f04bd318675686c1fb280260543b661df303982d9eb4b0a9a2dcb9288e72104f26c52b105bd02121337e740e1622b168601c940a7170b55665c9ef4a2d381e9036e85545d585d35388ec17b57172ec89bd0d462e5a740b20f1a4dc898124177ddae0053e65d751450839fa48aa540edde077262754c6da466a36929e908c60164e58f6e39127729f228fbe1560fa1e772f59168a2aebaa41934038e0d2d7defc11e9f3807ebd73cbf", 0xd8, 0x6, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x800, r5, &(0x7f0000002a00)="0e19e591e417f7fdb567941e3bb3523d8379065ce21db1e41fe811d754781a2e3e484fb490c415ddac39adae60ebde3e779adde27e64a977ee7aab3ae5db97dd5560dd3330e64ddd6f42a5d3fe667cc6e83b97b517b2d6fbc9a2f1ce93511a7f6ac6f8ac78813a5e081c83ea08ae8925910e758ca6137c9a98a9cec4cdec2bc45f70c9e612e972cc03bf1c1a9498b316a3eab7877f3aa696cf2184c3d19cdcede1f045a17ecc2947eb14c9fd5c3767feacfeb13ee43f51c0d34636648c356be0c1ee8c6bca1f462afb80f962834f9043b75fd24c6837a81499a40fa0d760ff2fc7101dc83e84800418b0aeee25cb64392cd4eaada1d964755ca79a714625ea367fadba4475f16d760ac4fcc9934de57bae2db07b9fa40d343681f7303b70f7ab3ae00606784a58d3b6cf1a27da15282eac4f65ae4e2f2f4b471d3af7b7ab4825d80629b6e75f242de453b8cb017d4d8a07999c714ea3c79af65e18fb2e35e4f4494e31ca5bfb81daceede45000015eab5825bd28b035b2c0d47088a29d88d58e69477054bcdf955686e4b368f1997eb4ab8075bb53649b778a06d230517cd99478cf013d89497a4eaeda77eb1f6f917fc062da480f042186a0494a028b1eb2be16dbc74d0eb8a2366814f8457fd9fe04f203656a1aca732d8770954ae522f31be8f84cb053da991d6106497543408ae8378e1182adcdf3ba1790d9a01721acba48cdbb5ca233420623164cb3a549b3f864fc9d7c6315297561e201bcc475668f708b719ef27356a80f00fd9a26043feb3dddbaa9109a7d334f7607cd0f40f0926b75da510ca54993deb1632537e0425dc10c062be179d0a7815502268b79e35ba3ec2a818845a17c018a7d54ae8072686d4faa13e70de0a0c3e0c438c91b2f9cf4a8d94dedc5135ffa811ee98d7bc64d294629eeb9655784d1311f98438877d41588b4a5a2a1420ab930d9d096cd43c1cf108419f05f4544f09fa90b3c3aeffb45b90f53ca4a6329a2233352b0154444cd8b676d608b533bdf36d8c632ab9e5d75bbea77538c9777eca48b2ae3983996069f80cceafa71683fe5c91a111f2d6bd97d30904fd615dfcee18d36d87e1f59b9fa0c9f9cf3f4154d597bd8e9112975e6f068689caa3f25f65a44840b55b81eee42d7dad59b88f04c1ea0d4fb263307fc5aa6f82e919f95e3fd652c98737a1c6655227c2b701ba63a7923a94b2217c20b7c517b1d4ff0db6c7e1f957471f592895468c925967ad7fdf9bbb9c4a62bad487456235e3fe0976fdd079f4df249dceb5956287c1c105b7c3479d694d6a19f5352fc114ede923cd789fc201590127e6db2fa0249693b3869d12b07057bc28c1001dae015723a1431d5f0a90c9ae5472103e2bf887d0a379a2ac6d1db86a3ad8b3de0234df6e1d91f939ec960b15f4adeeb773ddcee03217dbed5dda6bc2cb26607dd091665481f42b7d0e989a29eeeceb4c64094715cb62819e319558b3d353481471b583f2a5c29469ffab2e8151c784b5a82330fd7c6968ba529a7fe70a1173bf32bb56fb9e9f79694e415850f6b960edd53c6214bb626bd9e7d4d442ec2ea22b2c5b06d773fbd872dc9f2fe1a7cbfa8f8b59047c451bd6d3ae40bda00651dfbf35b3d7c3f89d8fa94e2bd0492698b021e67bddb722f0e77ab16e03d85b452c6ab62cec6b0ef0de05ab0b7d73362ac597ede8b1e851491dab0889af9ecb66b98338348eae63dc3e626da8878e330dcbb14c2edf612fdf4f60db9c43c36d9effa50cf859cdc05b9b914544da2d3cdf4b52c9989a57bb20b3e2be251d78575d3939019df1ef9bd52578e6babe97efcc2ea21cd695ca939beebc20d23789ee4a8dd07908af89affda5c6c942e99cf0bc19befa8a6ab7a0a93010cd1a550458ad863c3ae0fca86c46b21b588c1e09576409708dd2526d7f9cfc1b0a50442f1e9e8c69e2c29dc001a97b4f476fc6d9ee7bcf6c14eb9a483c499385f16da1c74006c27119560cf6cbbac01f14639c4f9efa8f4d5c8f6c56c8ca879cf9008f00c8ec431fb4df85c71562d73a444895a5aec0a7542d7d3e96ceb693089a5d3cf993edefdd59c2e7bfaf192b17024f98f8b750bd3615919c2c2e4367ea0ea80b4252ba432de7302cd8d82dbfb955bac0e1822334523cdeb96f75939328fa82bee412620f1c67a771ce1533c075f41736455f327cd96da831a57628f7d5f94e66d768efd9dca363fa370db0eae95cfa709bfbfe88a9d8f0d95303529a02d471ad2475a48a1be3c9f87859a9d32ca6d82059a24764fa19f9d13ec048240ff5c45ee93fb7e1da11f436e451ab09faa3948a331bf9dae07339d869229337bcd49013aa3d26804121a8de301ac0a383212fff038ed4cc7aa44a538960246512b9844aa65102b9b208a37b0ae63223c5de416185ca29da184c26e44139813cbf1f289b71c440ebc3af2454b292a7296f97ca4ed4b58e7d7b366e3f2ccb75ecd957cfffaf5a870fe2f9ed5584c9bdfcb605dee131db12ec2999c4f75fd9bfa8712759931c36be8dfa8f1939c86043994e3477f5f51ed809fd05199fd30732dec8ffa3a5f1bc18b5b50dec56a571a49b558e70cca9e52491260b82c52a164d11c685a0bdee3afba3859222bea9ae9ee3ef57aeaed9f3b0f743b48e21b3a90d8c9141c44087a6eb7066980be96d03e5b11acaa46c3eb56e69feb0a7beda7040673adceb2e687d99ca43f912b38856c85a00ffce2d045646d58adb8c608ee94ae170ad863457b11501075ba0e2cfc0224fcdaed79da21a6a8347945b00fa97d24d2e26127070144693bcdae9e6f5eaa4c0742ed5f279fd93bcf0bf497c810c262d1add49818eeb880f86c133550ad79b95013cf40f9ea9d9d45c7266442e4f514af5b694efba1e1e22a0f92f9c1cb2b0f9ecc9cd0f41ecde02bb77cdb0087ef35c239b616199e2feb553bfecc93eec3249e11898ac6d52695edb46aa1884e8e99e9a0d99c32f6428428866285b9d57d6067781468240017f5dd0545b92343d31c7de620692b14c02dd6efb364c46e7698380a88809afba23b4de1ec9a16f860bcbaa59318bc52e9f3b0d62baeebc8b6b29c4354d772a66f6439344c265b6daf0db2e82ace292b8d062c944c404ba28bc679858ddefe69f160f1b012cdfb307e4324581fdb0cd69fc34953bcb4f62a591dcf0c2a0459c69ef3706e6a34319892251a51432703f908dd4eea99d798751bfb95e4acc4d1063b7f2a3d124bcc53f4cbe5e95879a6091539bed0ffd613a5063172937181aa9d3e8367ec7ed60c59dff600905554ec392c8a1a1dfcc8042af9852e3edda4627185079ebb1ff1994b4d90b91a10837f6e4524c48c89c2ee232e59fa478fecbae324051ec4d5d88355cf0472dd11462c90e9f69dcf99e13f287c68ffc5667fba19955ffd2888b095379c63283345e79c5b87fd8c2ca757f231421614a2b15db60e9cfc5469027d504f9ad21af64f33ba2160a8be5c6036c0455bed022dd2186e653b02417477677adc7b54db95c996586c21f8ca726ea99e398c90efcf9ee3c662bc3faf54cfaa5cfa30cdca9dbe118c33634332019aa2ba9d1e32351633146c6767608a06b0a1c62d2433066d47f13fe2564bf4e44c3e48cf78f0a5d262329a4db24ab204810e7f90cad913d3bb7882ef077a50158aee34b6a6e739eeef7df4c574fc950fb4c5d8c78dca3303d7f6931af17e74b1f16f9f12059ea4885b096d1d0c8beceaf0cba7e338ddb463958a8e9cc54e14b0bd97a4ae646dd00ead0564fa7014ae1aab99682e5d3fa1b6dc7f1dea04ea9afbf51c9f585c3a74b1bd0bbdc2f174b1f6ce2fa680ca2bb6ed3ee453f993c482b7efbc52cdb0024b2f5f7333d2163dad0415837a9461d9d42296fe2c2f9211f1f4d93bd6f174b35f63166492fba76fd9b70d84a1fef6473582e75a35b0566c15da02ba7312adcc101f7531b7fc979d777f28f50f69abd01b5fe55d3ffa6d94f5d746fc4351f39db8934b455b314348fb07b2476fc7129c49c5ad6f083a11fb9e6fb87838d9ae99e53ed7143f21e277e9ba49bb87c7dcc0387c16f277fda3c2e62ee74d3bf3c222afdfc7a8fcce9a1cbc86fdbec293ddea87fc0202138356ca5cebc10371ae15aa7126e44028cd1f2c3b9386c9f083a565fd26639a3e91848b32aae2b0c462b48b7e7f5b3ef0a3f1a2a6baec8e68ede9165585353c7a02e7b6003bb9bc53d4dac47245daf9c777feb288588f721122d222e05c768b041cc9b40d47e555abf7fc619e3aa25117c18e8f397aa46e7372549de7a54bb2bf19f8339b800effb6e4140ae9e7df9e69d1acabd61857520a0de5c7c35f52305217a455f9d7b6e83a6b57adfeed7754c27afcaf086c3fc1d8bea6ce32812aa4b17c290dbb6ab05081fb57016be8a874d2c479c04f6d19147269a67937a44f6447a3641579835d0459a5fa11d66c91835ade5d2ec996cfad7a5f26c890f6d1078a531a8e0008c4468d3a8483bce92f9d4fc5ce08ceddfa40943c88287d2c9f672f2f476f42c681bb80966bde54eda35760b38d199ae770ba77512de78e5575ee59e222665498298ca16d8b8d9fb08fa259878ed3a0f107619f8bb18f2708cf68958dc6136246ef3420768fa2318d62da86743177ceb8e04e8308379d177ababf3b1cac298b2f9744c6cfadc94ea4b00875b18eaa2a69b0b480800fcbf828cb3298fd952f62c5d4aa20ba1030f722d38602695552590f5b307c9c442bd094eba483558ceea3e1a815b24d72063249e5bca059eb03c5c8ef524f77428c835343dd2428318e9a52288c272036b799acd50660de40db94a1796d6d05761570bcc9d07ec8735305109213fe6efcdf5cdc3c2c38ce9b1596b34f330da0d6ce48695838d760c16c788755321a43d66d675540df8912a6302a8c8109825c56a35b6ae01a54037673488134abae3973dcc756fe71bdf3fedeec5257ec1f7f57128aa1b2a326b052eabf61f4790fb43622b50c48f735b4ba02a6e90fe0b7c6db8dc99427a16b0aff6322b168a5b13894b51c73b9ab632dbf53e377bdff31b0e5024e83e02b0b5d678ee6e32603895a458210d22193aa96af1e87f237e6ccf2ddf08d6daed7a3cb1d62993f65062879fde26573e5036511e4c66948501b8807ea59ab7dfca5d5998d8783d3c8a53664822c7463f1acafd0d407a6f2a4329a0ce8f916ebdc281d04343ab34b89b4d8c4b37402e8108c4b7a777bc045d16bd2a53d2f608681eda962db577f4603d12e64a142b6f1de2bfd502010d9919bc89cc1bc0d12b6b98882ed271fb48790dbae7d6e2d10eced3bf9b231400a182eae0ad50204d2985e89c5d782ffe6b098e526a40213fbba3e0168f4b921c7b9a289b597ddb34f557478277c24fcc828a5907723a52f7b6cec8754f924994a926ce0f6de1f230b9262138d859314ec0d035f6cbc3e84b2de263ab399310880ed44c58e3aea6d8be03ab72071a911647726585d5c950e7eef48354bd442ec1b7a8ee80f5f16155d1f33211f123b6ff5008d16ea35d039fd5c8571566344b7f133884925462f7b543f9689aa450036cd7b9dc5edaa3ddf1cea71de9273578d4a0e7b06501cef8408ee8c93e1d7691b5d685b83b845ab6f78464221479565a11f6f98524871f12595facf03532fdfbb62021ec2e8d27855bae8bc1a67c2c9bcc12df5fde12592deead9bd6b036c0637509d2b2d1d06b45ee00ec5975761ed18b236e4a585fd734b7d54f215612a6031a81decbccc8b0544099034fd8bcdad4e884a3128edcec7009a5b87408bcb6d", 0x1000, 0x2, 0x0, 0x1}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:18 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:18 executing program 3: write$midi(0xffffffffffffffff, &(0x7f0000000780)="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", 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0xf84, 0x6}, 0xc) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000], 0x0, 0xc0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:19:19 executing program 1: r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000008c0)='ramfs\x00', 0x3046c90, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x90) write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="0b01094003000000d9010000000000006e0100000500000000000000000000005c7ef8e44ab1a859ca640dce747bfe9490678b0000000000000000000000000000000000000000000000000000000000c4bb648d5cb400a200"/1075], 0x433) getsockname$inet(r0, &(0x7f0000000400)={0x2, 0x0, @multicast1}, &(0x7f0000000440)=0x10) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r2, r4, 0x0, 0x80001d00c0d0) socket$alg(0x26, 0x5, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x280, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048014}, 0x400a843) [ 699.111855] audit: type=1804 audit(1599311959.057:1347): pid=2018 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/601/bus" dev="sda1" ino=16469 res=1 13:19:19 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2805}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x26000000, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x1a403, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x8, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x44081) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0e0000000400160004c26900"/21], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x80) [ 699.314614] audit: type=1804 audit(1599311959.207:1348): pid=2028 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/52/bus" dev="sda1" ino=16476 res=1 13:19:19 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000240)='./bus\x00', 0x1000, 0x2, &(0x7f0000001380)=[{&(0x7f0000000280)="bdaa5c2383f2e10ed005113912a1e875f28c6fb681a92c98a3d65f6427c79cce6ddd658fca4826ff61774cb28f0dbc05d16beafb86715c685f8ae0c1a5f65f527418abb07e67f249c08f0947c2e810fc816f14729b2981385944da42cc363dc0680b997be867b3fb1bf698dab20b41883b941076be8d96a6a9ef706300a55f1aa3944fe36331eecf210fd0252db226c7d73154865bc4e1002da87043de708fe6713131f7a794689a00743508a815679caf1b611bc0d0869ed06967814fd63db6c52c150169c7b30378db8fac4378093ba766019c5626", 0xd6, 0x6}, {&(0x7f0000000380)="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", 0x1000, 0x2}], 0x80, &(0x7f00000013c0)='cgroup2\x00') sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 699.392981] audit: type=1804 audit(1599311959.217:1349): pid=2019 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir115192091/syzkaller.0i0ep8/508/bus" dev="sda1" ino=16467 res=1 13:19:19 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000040)=0x7ff, 0x4) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4}) 13:19:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x2, 0x80000001) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="87b3a200b7010700000000c378583c7afb2f5668500bdc160000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e0014000280060002000000000008000100020000000a0005001400000000000000"], 0x50}, 0x1, 0xb}, 0x0) 13:19:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002100)={{{@in=@broadcast, @in6=@mcast2}}, {{@in=@initdev}}}, &(0x7f0000002200)=0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002240)={0x78, 0x0, r3, {0x6, 0x7, 0x0, {0x0, 0x50000000000000, 0x6d, 0x7, 0x1, 0x4, 0x0, 0x0, 0x10002, 0x8000, 0x100, 0x0, 0x0, 0x3, 0x77a}}}, 0x78) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x2, 0x3, 0x208, 0x108, 0x0, 0x0, 0x0, 0x108, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, '\x00', 'veth0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x83, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2a8, &(0x7f0000000440)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xee\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8i\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) 13:19:19 executing program 1: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4203, r0, 0x0, &(0x7f0000000080)={0x0}) syz_open_procfs(r0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x3c7001, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 699.896416] audit: type=1804 audit(1599311959.837:1350): pid=2052 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir297428485/syzkaller.h3wF80/236/bus" dev="sda1" ino=16488 res=1 13:19:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x8400fffffff7) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x81, 0x401) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='virtiofs\x00', 0xc01, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1f, 0x4) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) openat$cgroup_subtree(r1, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d0) [ 700.076703] audit: type=1804 audit(1599311959.867:1351): pid=2017 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir857098879/syzkaller.99W4xc/52/bus" dev="sda1" ino=16476 res=1 13:19:20 executing program 2: prlimit64(0x0, 0x2, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x10, 0x0, 0x3, 0x112c000000000000, 0x0, 0x200}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x10d) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x10000) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x4) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1f7, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x1}]) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendfile(r3, r3, 0x0, 0x8400fffffffb) sendfile(0xffffffffffffffff, r2, &(0x7f0000000100), 0x100000001) [ 700.171262] audit: type=1804 audit(1599311959.867:1352): pid=2060 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/601/bus" dev="sda1" ino=16469 res=1 13:19:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000ff7f0000000000000279aa9500014000005e43f13959236b8d48690800000000b0012cc048963515158d7cfbf9a67349c55479e90092ab362f2938e6692db7d7a281ed862cac92bef33a06b36c5ec15101adb2a1f3479f32b6430b2b960c00000000000000a22a00c0803866ce209d8bc22f93c8d417a1adddfb420777d151ee9ba14d05de8bbec2306aa6049240e483a9b192ae1c14e75fd8a3631e693846410848ca704ca51b1c965700"/185, @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000000140)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 700.407905] audit: type=1804 audit(1599311959.867:1353): pid=2060 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/601/bus" dev="sda1" ino=16469 res=1 13:19:20 executing program 0: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x3, 0x1, 0x4, 0x800, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0xa0e, 0x200, 0x101, 0x1f, 0x4}}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xa4, 0x5, 0x5, 0x9, 0x0, 0x9, 0xd1, 0xe, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x401, 0x4, @perf_config_ext={0x80, 0x4}, 0x8400, 0x2, 0x1, 0x0, 0x100000001, 0x8, 0x8}, 0xffffffffffffffff, 0xb, r3, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) ioctl$SIOCGSTAMPNS(r7, 0x8907, &(0x7f0000000240)) write$cgroup_type(r6, &(0x7f0000000000)='threaded\x00', 0x248800) [ 700.551526] audit: type=1804 audit(1599311959.887:1354): pid=2062 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/601/bus" dev="sda1" ino=16469 res=1 13:19:20 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000100)=0x40000001, 0x4) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f00000000c0)) fcntl$setpipe(r0, 0x407, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000200)=@ethtool_dump={0x40, 0x500d, 0x7f, 0x1, 'Y'}}) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="07ed186652a8ad145621ff1c14f32e239a374eed806bc5197de86caa767fb59cc746a53c52aeeed7db3375066c04e187", 0x30, 0xfffffffffffffffc) [ 700.672470] audit: type=1804 audit(1599311959.897:1355): pid=2024 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir403805971/syzkaller.mliZDL/601/bus" dev="sda1" ino=16469 res=1 13:19:20 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f00000000c0)) close(r3) r4 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x56, 0x1, 0x6, 0x9, 0x0, 0x9e7c, 0x8, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000100), 0x55d0062c6aeaf862}, 0x100, 0x5, 0xad88, 0x0, 0x8000, 0x6, 0x5000}, r4, 0x9, r2, 0xa) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0x96a44f1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000180)='./bus\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='9p\x00', 0x4000, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040), 0x10) splice(r1, 0x0, r3, 0x0, 0x4ffdc, 0x0) [ 700.870559] Bluetooth: hci5 command 0x041b tx timeout 13:19:20 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x13, &(0x7f0000000100)) ptrace(0x10, r2) chown(&(0x7f0000000280)='./file0\x00', 0xee00, 0xffffffffffffffff) ptrace$getregset(0x4203, r2, 0x0, &(0x7f0000000080)={0x0}) sched_getparam(r2, &(0x7f0000000240)) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x2a) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 13:19:20 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="1f00000000421800280012800a00010076786c616e00000018000280140010"], 0x3}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000040)=0x68) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x2) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 13:19:20 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:21 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x2, 0x8, 0x0, 0xffffffffffffffff}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="5dac4e7720892abf9cd4e57aefa9dfb63c72a2c49913157c882f6b62532c183ee72454abe524c51727284f7acb077a5aa0e679cb96cca65c406dab8b97963067dd50c3f3ae2e3f1c36d50140bf0e45018cf2cd213a3e9ca74ae2f53ff8e03b0e0430983b91dd290135dc755db92123b256b1c587e72b6e07b3eb7d8b334c3bf77c977574deafe3f077552b9f74991427405ddefa18f3e9bb71d2bb4bcf49b7502f6a0fcd0c5293d74cb5c414ba6797c8e093fd76dfc78fe80978cd30dfdbcc6f456139493e43964ca8c2fcf5e19de645f25d84153d8b7b32cc0b68a77fc990361dbac79a2f71d8be1d73187deae43489f4c28764fed07b7d6fed58040000007c508c7fb54f7d006aa453574b2f13edcfbfbd05bbed427010f9e19842285924d4adda6de6093f8b17a3dc9c3247aea9673d29", @ANYRES32, @ANYRES32=r3, @ANYRES32=r1], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 701.461850] kasan: CONFIG_KASAN_INLINE enabled 13:19:21 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x781b40, 0x85) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000000c0)=0x7, 0x4) 13:19:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x20, 0x4810}, 0x0) fcntl$setstatus(r3, 0x4, 0x46000) lseek(r3, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x0, &(0x7f0000000540)) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, 0x0, 0x8400fffffffb) sendfile(r2, r2, &(0x7f0000000100), 0x8080ffffff7e) [ 701.488033] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 701.577805] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 701.584053] Modules linked in: [ 701.587245] CPU: 0 PID: 2127 Comm: syz-executor.3 Not tainted 4.14.196-syzkaller #0 [ 701.595027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.604372] task: ffff88804e436340 task.stack: ffff888087200000 [ 701.610425] RIP: 0010:__vxlan_dev_create+0x5d6/0x970 [ 701.615514] RSP: 0018:ffff888087207178 EFLAGS: 00010a02 [ 701.620867] RAX: dffffc0000000000 RBX: 1ffff11010e40e31 RCX: ffffc90010d4f000 [ 701.628125] RDX: 1bd5a00000000040 RSI: ffffffff83e97734 RDI: ffff8880a0569f08 [ 701.635388] RBP: 0000000000000000 R08: ffffffff8a0a07b0 R09: 0000000000000000 [ 701.642662] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff0 [ 701.649921] R13: ffff8880a0569f00 R14: dead000000000200 R15: ffff888087aa9b80 [ 701.657168] FS: 00007f695c119700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 701.665376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.671240] CR2: 0000000002398ad8 CR3: 0000000050ac5000 CR4: 00000000001406f0 [ 701.678486] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 701.685730] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 701.692984] Call Trace: [ 701.695563] ? vxlan_fdb_add+0x2e0/0x2e0 [ 701.699604] ? vxlan_setup+0x460/0x460 [ 701.703470] vxlan_newlink+0xa3/0xe0 [ 701.707159] ? __vxlan_dev_create+0x970/0x970 [ 701.711633] ? rtnl_create_link+0x129/0x890 [ 701.715932] rtnl_newlink+0xf88/0x1830 [ 701.719800] ? __lock_acquire+0x5fc/0x3f20 [ 701.724011] ? __vxlan_dev_create+0x970/0x970 [ 701.728488] ? kmem_cache_free+0x7c/0x2b0 [ 701.732608] ? rtnl_dellink+0x6a0/0x6a0 [ 701.736558] ? trace_hardirqs_on+0x10/0x10 [ 701.740771] ? lock_acquire+0x170/0x3f0 [ 701.744732] ? lock_acquire+0x170/0x3f0 [ 701.748776] ? lock_downgrade+0x740/0x740 [ 701.752898] ? rtnl_dellink+0x6a0/0x6a0 [ 701.756859] rtnetlink_rcv_msg+0x3be/0xb10 [ 701.761075] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 701.765546] ? netdev_pick_tx+0x2e0/0x2e0 [ 701.769669] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 701.774661] netlink_rcv_skb+0x125/0x390 [ 701.778695] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 701.783165] ? netlink_ack+0x9a0/0x9a0 [ 701.787028] netlink_unicast+0x437/0x610 [ 701.791070] ? netlink_sendskb+0xd0/0xd0 [ 701.795105] netlink_sendmsg+0x62e/0xb80 [ 701.799144] ? nlmsg_notify+0x170/0x170 [ 701.803107] ? security_socket_sendmsg+0x83/0xb0 [ 701.807837] ? nlmsg_notify+0x170/0x170 [ 701.811796] sock_sendmsg+0xb5/0x100 [ 701.815485] sock_no_sendpage+0xe2/0x110 [ 701.819520] ? __sk_mem_schedule+0xd0/0xd0 [ 701.823747] ? __sk_mem_schedule+0xd0/0xd0 [ 701.827957] sock_sendpage+0xdf/0x140 [ 701.831822] pipe_to_sendpage+0x226/0x2d0 [ 701.835954] ? sockfs_setattr+0x140/0x140 [ 701.840076] ? direct_splice_actor+0x160/0x160 [ 701.844645] __splice_from_pipe+0x326/0x7a0 [ 701.848943] ? direct_splice_actor+0x160/0x160 [ 701.853502] generic_splice_sendpage+0xc1/0x110 [ 701.858143] ? vmsplice_to_user+0x1b0/0x1b0 [ 701.862439] ? rw_verify_area+0xe1/0x2a0 [ 701.866474] ? vmsplice_to_user+0x1b0/0x1b0 [ 701.870768] SyS_splice+0xd59/0x1380 [ 701.874460] ? compat_SyS_vmsplice+0x150/0x150 [ 701.879015] ? SyS_clock_settime+0x1a0/0x1a0 [ 701.883400] ? do_syscall_64+0x4c/0x640 [ 701.887350] ? compat_SyS_vmsplice+0x150/0x150 [ 701.892093] do_syscall_64+0x1d5/0x640 [ 701.895958] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 701.901128] RIP: 0033:0x45d5b9 [ 701.904294] RSP: 002b:00007f695c118c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 701.911978] RAX: ffffffffffffffda RBX: 0000000000033980 RCX: 000000000045d5b9 [ 701.919220] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 701.926464] RBP: 000000000118d038 R08: 000000000004ffe2 R09: 0000000000000000 [ 701.933720] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 701.940979] R13: 00007ffca33c5a6f R14: 00007f695c1199c0 R15: 000000000118cfec [ 701.948227] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 09 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 75 08 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 dd 02 00 00 49 89 2e 4d 8d 7d 10 48 85 ed 0f [ 701.967327] RIP: __vxlan_dev_create+0x5d6/0x970 RSP: ffff888087207178 13:19:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r3], 0x20, 0x4810}, 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) 13:19:22 executing program 1: syz_open_procfs(0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/171) socketpair$unix(0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) openat$cgroup_subtree(r0, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) statfs(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)=""/4096) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 702.049933] ---[ end trace 7c09f2a2eabdbbf6 ]--- [ 702.056703] Kernel panic - not syncing: Fatal exception [ 702.063452] Kernel Offset: disabled [ 702.067065] Rebooting in 86400 seconds..