(r1, 0x89e1, &(0x7f0000000140)={'veth1_to_hsr\x00', 0xffffffff, 0x8}) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000100)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, 0x56}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:34:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x3, 0x0, 0x2000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 625.856984][T26697] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 625.875762][ T27] audit: type=1804 audit(1584045282.711:656): pid=26707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/484/file0/bus" dev="sda1" ino=16581 res=1 20:34:42 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x980000, 0x20, 0x3ff, r2, 0x0, &(0x7f00000000c0)={0xa00001, 0x3, [], @p_u8=&(0x7f0000000080)=0x4d}}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x60, r7, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008091}, 0x80) 20:34:43 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:34:43 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) 20:34:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)=0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYPTR64, @ANYRES16=r7, @ANYRESHEX=0x0], @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES16=r6], @ANYRESHEX=0x0]], 0x8) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x4, 0x80, 0x9, 0x2a, 0x0, 0x4, 0xc8310, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x83a, 0x4, @perf_config_ext={0x100000000, 0x2}, 0x40020, 0x100000001, 0x7cb, 0x1, 0x5, 0xfff, 0x7d}, r5, 0x4, r6, 0x3) 20:34:43 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0xa, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 20:34:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0xfffffdb1, 0xfa00, {r1, 0xc41}}, 0x10) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) connect$x25(r2, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000000c0)={@initdev, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@loopback, 0x39, r3}) [ 626.951557][T26776] xt_l2tp: v2 doesn't support IP mode 20:34:43 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001640)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001680)=[{&(0x7f0000001400)=""/218, 0xda}, {0x0}], 0x2, 0x0) 20:34:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) pipe2(&(0x7f0000000080), 0x84000) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r0, r5, &(0x7f0000000000), 0x8080fffffffe) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:34:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x9) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x10, &(0x7f0000000140)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x99}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000140)=r6, 0x4) 20:34:44 executing program 2: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 627.330250][T26798] sctp: [Deprecated]: syz-executor.0 (pid 26798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 627.330250][T26798] Use struct sctp_sack_info instead 20:34:44 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x4000, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) 20:34:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0xfffffd94, 0xfa00, {r1, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 627.543575][T26798] sctp: [Deprecated]: syz-executor.0 (pid 26798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 627.543575][T26798] Use struct sctp_sack_info instead 20:34:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) sysfs$3(0x3) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:34:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000140)=0x2, 0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:34:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) [ 627.747011][T26806] attempt to access beyond end of device [ 627.804814][T26806] loop2: rw=2049, want=78, limit=63 [ 627.844415][T26806] buffer_io_error: 15 callbacks suppressed [ 627.844426][T26806] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 627.859507][T26806] attempt to access beyond end of device [ 627.865287][T26806] loop2: rw=2049, want=79, limit=63 [ 627.871007][T26806] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 627.886869][T26806] attempt to access beyond end of device [ 627.922524][T26806] loop2: rw=2049, want=80, limit=63 [ 627.947338][T26806] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 627.983822][T26806] attempt to access beyond end of device 20:34:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x12a881, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000001000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, 0x2000}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x200, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x401, 0x0, 0x1, 0x20004, 0x40000000fb, 0x0, 0x0, 0x6, 0xfffffffffffff001, 0x0, 0x0, 0xae6, 0x4, 0x2f5]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 627.996199][T26806] loop2: rw=2049, want=81, limit=63 [ 628.001932][T26806] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 628.012518][T26806] attempt to access beyond end of device [ 628.018694][T26806] loop2: rw=2049, want=130, limit=63 [ 628.024325][T26806] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 628.033325][T26806] attempt to access beyond end of device [ 628.039816][T26806] loop2: rw=2049, want=131, limit=63 20:34:44 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000018008100e00f80ecdb4cb92e0a480e181e0cd302e8bd6efb120008000400100000000065580000000000", 0xd5}], 0x1}, 0x0) [ 628.045250][T26806] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 628.054223][T26806] attempt to access beyond end of device [ 628.087590][T26806] loop2: rw=2049, want=132, limit=63 20:34:44 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) clone(0x84000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() gettid() socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001840)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001840)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r5}, 0x18) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r2}, 0x18) r6 = dup(r3) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0xb0bb) sendfile(r6, r7, 0x0, 0x200800100000001) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) splice(r9, 0x0, r10, 0x0, 0x10005, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c5a00000000000000e49dec120000020092a1555e00"/45], 0x1c}}, 0x0) pipe(&(0x7f0000000080)) [ 628.092933][T26806] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 628.147475][T26806] attempt to access beyond end of device [ 628.175852][T26806] loop2: rw=2049, want=133, limit=63 [ 628.204317][T26806] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 628.232164][T26806] attempt to access beyond end of device [ 628.258319][T26852] IPv6: NLM_F_CREATE should be specified when creating new route [ 628.272502][T26806] loop2: rw=2049, want=142, limit=63 [ 628.287302][T26806] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 628.296055][T26806] attempt to access beyond end of device [ 628.356236][T26806] loop2: rw=2049, want=143, limit=63 [ 628.388538][T26806] Buffer I/O error on dev loop2, logical block 142, lost async page write 20:34:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x815) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r13}}, 0x33) [ 628.407830][T26806] attempt to access beyond end of device [ 628.414181][T26806] loop2: rw=2049, want=144, limit=63 [ 628.451844][T26806] attempt to access beyond end of device [ 628.481346][T26806] loop2: rw=2049, want=145, limit=63 20:34:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 20:34:45 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x8003, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x10, &(0x7f0000000140)={r3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x10, &(0x7f0000000140)={r6}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r3, 0x4, 0x8f, 0x28, 0x4, 0x81, 0x2, 0xff, {r6, @in6={{0xa, 0x4e20, 0x6ce, @empty, 0x6}}, 0x9, 0x10000, 0x1, 0x5, 0x7ff}}, &(0x7f00000002c0)=0xb0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r9}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4, 0x0, 0x1f]}) r11 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r11) ioctl$VIDIOC_G_SELECTION(r11, 0xc040565e, &(0x7f00000004c0)={0x1, 0x103, 0x2, {0x4a4a, 0x5, 0x5e}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x80101, 0x0) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r12, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r13, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x82}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) [ 628.517343][T26806] attempt to access beyond end of device [ 628.523017][T26806] loop2: rw=2049, want=257, limit=63 [ 628.648727][T26873] sctp: [Deprecated]: syz-executor.4 (pid 26873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 628.648727][T26873] Use struct sctp_sack_info instead 20:34:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 628.754558][T26873] sctp: [Deprecated]: syz-executor.4 (pid 26873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 628.754558][T26873] Use struct sctp_sack_info instead 20:34:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = msgget$private(0x0, 0x30) msgctl$IPC_RMID(r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 629.026211][T26877] sctp: [Deprecated]: syz-executor.4 (pid 26877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.026211][T26877] Use struct sctp_sack_info instead 20:34:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x14, r2, 0xf591d3ee456bd401, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 629.066903][T26877] sctp: [Deprecated]: syz-executor.4 (pid 26877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.066903][T26877] Use struct sctp_sack_info instead [ 629.094554][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 629.094568][ T27] audit: type=1804 audit(1584045285.931:667): pid=26888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/488/file0/bus" dev="sda1" ino=16586 res=1 20:34:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffff8000, 0x0, 0x1, 0x5, 0x100, 0x2ad}, &(0x7f0000000180)=0x20) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000080)) 20:34:46 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f000004d000)=[{}], 0xfffffe82) writev(r0, &(0x7f0000001280)=[{&(0x7f0000000040)="800d5a77b63a73a6023129b0361865bfa6e4f34aa5ccb9289e28e23b3ef214560fe5b069643da42f13a8f0f43b0d6a6be8", 0x31}, {0x0}, {0x0}, {&(0x7f0000001240)="b5d414bb4da12f68", 0x8}], 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 629.593279][T26908] attempt to access beyond end of device [ 629.631862][T26908] loop2: rw=2049, want=78, limit=63 [ 629.647239][T26908] attempt to access beyond end of device [ 629.688139][T26908] loop2: rw=2049, want=79, limit=63 [ 629.693442][T26908] attempt to access beyond end of device 20:34:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x24, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x410, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5ee}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x150}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @broadcast}, 0x3e84}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf05}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2be7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xa7e8d91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x71c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x32}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa084ed}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x759}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffc00000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x840}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}]}]}, 0x410}, 0x1, 0x0, 0x0, 0x20048045}, 0xc880) 20:34:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r4 = dup3(r2, r3, 0x80000) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x81, 0x7, [0xc81, 0x613, 0x2, 0x9, 0x81, 0x2, 0x2af3]}, &(0x7f00000000c0)=0x16) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)={r6, 0x8}, &(0x7f0000000140)=0x8) [ 629.901972][T26908] loop2: rw=2049, want=80, limit=63 [ 629.907909][T26908] attempt to access beyond end of device [ 629.915340][T26908] loop2: rw=2049, want=81, limit=63 [ 629.915440][T26930] tipc: Failed to obtain node identity [ 629.925484][T26908] attempt to access beyond end of device [ 629.936623][T26908] loop2: rw=2049, want=130, limit=63 [ 629.947313][T26908] attempt to access beyond end of device [ 629.953095][T26908] loop2: rw=2049, want=131, limit=63 [ 629.980437][T26908] attempt to access beyond end of device [ 629.986351][T26908] loop2: rw=2049, want=132, limit=63 [ 629.992329][T26908] attempt to access beyond end of device 20:34:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080), 0x10) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 630.005621][T26908] loop2: rw=2049, want=133, limit=63 [ 630.012379][T26908] attempt to access beyond end of device [ 630.027217][T26908] loop2: rw=2049, want=142, limit=63 [ 630.032690][T26908] attempt to access beyond end of device [ 630.048641][T26930] tipc: Enabling of bearer rejected, failed to enable media [ 630.060107][T26908] loop2: rw=2049, want=143, limit=63 [ 630.077222][T26908] attempt to access beyond end of device [ 630.105355][T26908] loop2: rw=2049, want=144, limit=63 [ 630.126862][T26908] attempt to access beyond end of device [ 630.140242][T26908] loop2: rw=2049, want=145, limit=63 [ 630.150326][T26908] attempt to access beyond end of device [ 630.161651][T26908] loop2: rw=2049, want=257, limit=63 20:34:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r4, r2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r6}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r5, 0x0, 0x0) [ 630.186338][ T27] audit: type=1804 audit(1584045287.021:668): pid=26921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/489/file0/bus" dev="loop2" ino=67 res=1 20:34:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x40, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x33) 20:34:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='projid_map\x00') write$P9_RCLUNK(r0, &(0x7f0000000640)={0x7, 0x79, 0x2}, 0x7) r1 = gettid() r2 = getpid() openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcsu\x00', 0xc241, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)={0x2}) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000580)={0xffff, 0x7ff, 0x2, 0x1f}, 0x8) r4 = clone3(&(0x7f0000000500)={0x100000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280), {0x28}, &(0x7f00000002c0)=""/201, 0xc9, &(0x7f00000003c0)=""/250, &(0x7f00000004c0)=[0x0, r1, r2], 0x3}, 0x50) wait4(r4, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000ec000000ec00400007fd4eb3e09700000000000000"], 0x0, 0x21}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/71, 0x47}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6}}, 0x10) 20:34:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x20000800) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 630.658559][T26962] attempt to access beyond end of device [ 630.676710][T26962] loop2: rw=2049, want=78, limit=63 20:34:47 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 630.698780][T26962] attempt to access beyond end of device [ 630.726989][T26962] loop2: rw=2049, want=79, limit=63 20:34:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) [ 630.753759][T26962] attempt to access beyond end of device [ 630.766524][T26962] loop2: rw=2049, want=80, limit=63 [ 630.775893][T26962] attempt to access beyond end of device [ 630.783779][T26962] loop2: rw=2049, want=81, limit=63 [ 630.793645][T26962] attempt to access beyond end of device [ 630.820419][T26962] loop2: rw=2049, want=130, limit=63 [ 630.826506][T26962] attempt to access beyond end of device [ 630.853643][T26962] loop2: rw=2049, want=131, limit=63 [ 630.867251][T26962] attempt to access beyond end of device [ 630.889890][T26962] loop2: rw=2049, want=132, limit=63 [ 630.969751][T26962] attempt to access beyond end of device [ 631.002867][T26962] loop2: rw=2049, want=133, limit=63 20:34:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x1410, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 631.023619][T26962] attempt to access beyond end of device [ 631.080327][T26962] loop2: rw=2049, want=142, limit=63 [ 631.152653][T26962] attempt to access beyond end of device [ 631.163822][T26962] loop2: rw=2049, want=143, limit=63 [ 631.179129][T26962] attempt to access beyond end of device [ 631.213808][T26962] loop2: rw=2049, want=144, limit=63 [ 631.221029][T26962] attempt to access beyond end of device [ 631.233632][T26962] loop2: rw=2049, want=145, limit=63 [ 631.246018][T26962] attempt to access beyond end of device [ 631.259767][T26962] loop2: rw=2049, want=257, limit=63 [ 631.274436][ T27] audit: type=1804 audit(1584045288.111:669): pid=26979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/490/file0/bus" dev="loop2" ino=68 res=1 20:34:49 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) add_key(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000002c0)='4', 0x1, 0xfffffffffffffffe) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clock_settime(0x0, 0x0) socket(0x0, 0x2, 0x1) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000100)) renameat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000340)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$AUDIT_TTY_SET(r1, 0x0, 0x20008000) 20:34:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) fchdir(r3) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'team_slave_1\x00', 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4}}, 0x10) 20:34:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f00000002c0)={0x0, 0x1, {0x1f, 0x1a, 0x3, 0x1, 0x5, 0x88, 0x2, 0x62}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) pidfd_getfd(0xffffffffffffffff, r3, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r11, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x9a0000, 0xffff0000, 0x0, r8, 0x0, &(0x7f0000000180)={0x3e00af, 0xfffffffd, [], @string=&(0x7f0000000140)=0x1f}}) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000080)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xb88, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x10800}) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) r14 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x200002, 0x0) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) r16 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r16, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r15, 0x84, 0x10, &(0x7f0000000140)={r17}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r14, 0x84, 0x6c, &(0x7f0000000340)={r17, 0x1000, "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"}, &(0x7f0000001380)=0x1008) 20:34:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5a, 0x111600) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000000c0)={0x1, 0x1, [{r3, 0x0, 0x4000, 0x8000}]}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) 20:34:49 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = accept4$tipc(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000180)={'caif0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 632.985876][T27016] attempt to access beyond end of device [ 632.991835][T27016] loop2: rw=2049, want=78, limit=63 [ 632.997221][T27016] buffer_io_error: 26 callbacks suppressed [ 632.997232][T27016] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 633.023134][T27016] attempt to access beyond end of device [ 633.037680][T27016] loop2: rw=2049, want=79, limit=63 [ 633.042927][T27016] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 633.074060][T27016] attempt to access beyond end of device [ 633.092391][T27016] loop2: rw=2049, want=80, limit=63 [ 633.117113][T27022] sctp: [Deprecated]: syz-executor.4 (pid 27022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.117113][T27022] Use struct sctp_sack_info instead [ 633.124280][T27016] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 633.173914][T27016] attempt to access beyond end of device [ 633.182467][T27016] loop2: rw=2049, want=81, limit=63 [ 633.187912][T27016] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 633.196729][T27016] attempt to access beyond end of device [ 633.202772][T27016] loop2: rw=2049, want=130, limit=63 [ 633.217286][T27016] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 633.233211][T27016] attempt to access beyond end of device [ 633.239690][T27016] loop2: rw=2049, want=131, limit=63 [ 633.245141][T27016] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 633.251293][T27030] sctp: [Deprecated]: syz-executor.4 (pid 27030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 633.251293][T27030] Use struct sctp_sack_info instead [ 633.254026][T27016] attempt to access beyond end of device [ 633.276389][T27016] loop2: rw=2049, want=132, limit=63 [ 633.282152][T27016] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 633.294602][T27016] attempt to access beyond end of device [ 633.305365][T27016] loop2: rw=2049, want=133, limit=63 [ 633.313019][T27016] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 633.335145][T27016] attempt to access beyond end of device [ 633.350717][T27016] loop2: rw=2049, want=142, limit=63 [ 633.361959][T27016] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 633.375023][T27016] attempt to access beyond end of device [ 633.382783][T27016] loop2: rw=2049, want=143, limit=63 [ 633.392274][T27016] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 633.404592][T27016] attempt to access beyond end of device [ 633.414400][T27016] loop2: rw=2049, want=144, limit=63 [ 633.422049][T27016] attempt to access beyond end of device 20:34:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 633.432016][T27016] loop2: rw=2049, want=145, limit=63 [ 633.439813][T27016] attempt to access beyond end of device [ 633.445594][T27016] loop2: rw=2049, want=257, limit=63 20:34:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1, 0xd702}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000140)=0x8000, 0x2) 20:34:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x100000, 0xf000, 0x10000, 0xf000], 0x1, 0x10, 0x8}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8}, 0x33) [ 633.488029][ T27] audit: type=1804 audit(1584045290.331:670): pid=27034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/491/file0/bus" dev="loop2" ino=69 res=1 20:34:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xef, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x1f4, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x38edfa17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xaf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x37c2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xad8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) 20:34:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) setsockopt$inet6_dccp_int(r4, 0x21, 0x4, &(0x7f00000001c0)=0x81, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x6, 0x6, 0x20) setsockopt$inet_int(r8, 0x0, 0x17, &(0x7f0000000000)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r8, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r8, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, {0xa, 0x3, 0x0, @initdev, 0x3}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x25, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) r10 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x220000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x111}}, 0x20) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x902, 0x0) accept$packet(r11, 0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r9}}, 0x33) r12 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r12) setsockopt$ax25_int(r11, 0x101, 0x1, &(0x7f0000000100)=0x1, 0x4) [ 634.013374][T27080] attempt to access beyond end of device [ 634.060283][T27080] loop2: rw=2049, want=78, limit=63 [ 634.065554][T27080] attempt to access beyond end of device [ 634.168713][T27080] loop2: rw=2049, want=79, limit=63 [ 634.173999][T27080] attempt to access beyond end of device [ 634.232796][T27080] loop2: rw=2049, want=80, limit=63 [ 634.269604][T27080] attempt to access beyond end of device [ 634.275536][T27080] loop2: rw=2049, want=81, limit=63 [ 634.297351][T27080] attempt to access beyond end of device [ 634.314020][T27080] loop2: rw=2049, want=130, limit=63 20:34:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) 20:34:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x105000, 0x0) sendmmsg$alg(r2, &(0x7f0000003080)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="4fa427b930200c85a04b3e626145707108cb5600998761a3c587759122cdedfcd951a04207f2c66f038111ed16059c9c0a62e60899487006c70587d91a47ebb45b9c82088197f51d16d133bf036d2c52ac1bf4d6893ab48514607946687f39d41852c3f804ffaa74bf2be53b2c6aaccba8939866d981293a499b05d3a635a0e7", 0x80}, {&(0x7f0000000140)="d05ed515a660496da43815a4b4c4c740cd5e212ff3892b6c1469158938cc01e55cf25e322568c9390d6df42ae24ca381800d706d66c7ecce80458525b8510de918661ef8f343c1a6ad1e737898097437447e24f303f68435c2b413f8352ed01f322edfd6b7a9a40c9b87bfb078ca630b515a773ddd24bdc994e6d600f2b0e6fd0d923f", 0x83}, {&(0x7f0000000380)="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", 0x1000}], 0x3, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0xcea}, @op={0x18, 0x117, 0x3, 0x1}], 0x60}, {0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001380)="73fb27a14373cb4bad3e8285619de917e6cfd69016610e2a2f098bd013ebdac7d30ae54b17add1856278801aa678ac2c07fab3cd84792f9d08f50227dc55aa307ad5df7441", 0x45}, {&(0x7f0000001400)="9b9f8e43236e0c79124dd16c27a5329f28b6f82801c25bfc574ed9fd54203da716035bf8735ec5c17c9a338ea7e23c0a48b19755f59b4abec5009f4eb8ee6dd8784f5a1a1a19e95e040c6449e77078e3a017844f890df4b1cf121b1b931b3dcbbba182bb1a3381", 0x67}, {&(0x7f0000000300)="726cc85c53cd67d0a86b20e39ca1647398e1c0c8f5acf1b10c737f886752969c9d7e766066e6c9a9d4aef2eb13aeccdf93f87930947e4a12", 0x38}], 0x3, &(0x7f00000014c0)=[@assoc={0x18, 0x117, 0x4, 0x7fff}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x22, "3fe3a0e11ad74bdda7cf01c672c6af3755109c9627b0d7dd8bb49eb10a06d2859713"}, @op={0x18}], 0x80, 0x4008844}, {0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001540)="bf33a2e03147205a7a3d6c30df9b86edc1441ff69cadf2ee4263ed423a60333efc9a4a0410c541088d10f7d40a1253dcd7f25dd5e243ce90a7393a88d906c2a5a2ef3febf9a5c6073b762bb9fd6fa73dfd9f97fca32c209e", 0x58}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="b9f936c3e599def3b0e09c0e0cf6d284e7d2b1c4b308faabc43ec5bd56b7", 0x1e}, {&(0x7f0000002600)="422bcc1b135befdb6cd8654ea78bec21cf26e0602a7ae303f3bde8b7e87950df887415ecee9f96156cc6abca3b0c6dc3c24488f55691ffa58ea98f757b95fb1627752d95dac3e7f253f4514d88ab75895d082e8b66b45ee7660abb9812676e57e3462fe9b922ccedf40b9ba97e6de8b8eac691713cffb34215c01031830bdb16d2eb8c14b883ad0d9a8c97c21bd62dea52947800c8dc4d6a016962", 0x9b}, {&(0x7f00000026c0)="fecf0b9a3dc9d2b9b7e7f6c7ab0e14ebb68d97b9965d6fd6ecafd7b7b1fb50d34c80ae820dd6fb6457bf9f3bfb866f517a59c09dceec0bc9f114b039282015eee5f795a18b0d6ecf6c923d989103baf14fa806fc97ce1e9923c6b3a2342103c6085b554f702c8e44793310d671e48ecfe2a6c4c67f17fe3d29fe459270df176532b7f820bf201db8854dec01afe08a0bc56059f3e85a20e4a89a7b41fd7a18db8aa6de02c372a13574202f6d4ecbf45a53d06312be6a0838f7105ba617e19a84c7fbfabb0417e56aabb50f1c13f6d2d9006ab594d1e993a29d8c7dcd4ee52616b9cabe326359d93c24a4afaf", 0xec}, {&(0x7f00000027c0)="295b2d48d75eea0757c8c71dd6f133c9769721773fc7ac4219955d9101a222b48f784df6a41cfbf122f50cae488d6b7fa04981e3c0afe48ceb5acccc4640f5716b55ac406009304ad141cdf2072148922ab812c9fd44efb47ea7792eeab62f998e80039bac7a655d839b5cf5cb02197b2f1acaab53216ab3acd60b1b46250637dd898fd5", 0x84}], 0x6, 0x0, 0x0, 0x20004000}, {0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002900)="79c7fa94a18f2d9a2a1c003ebc470e75516109e03ba93cdb45aaec1dc4a9c5bf971cd88139149589368a4df34d9cc35d58a3b5cc6c4dfab3e5edc4069d6bf696fc302dd2c6f81463e9c0f5be6c87a59721da1b2e91c96d9f73f8d4fc7022b889dfcb80bf882ab70a52299789f293d97c0e4727b9ead8e2b24e3e25cf", 0x7c}, {&(0x7f0000002980)="82a2756d39aeef491bbb6f2379df3f00f529a5cb2d61a001fb684d9ab48a23e65b93268dd61dbe10e91749f20cd8685933487431ece43f2e6f8cdd77c4004c", 0x3f}, {&(0x7f00000029c0)="cd75c1b3f7dedc5a89c93d1ec0140ba742fd0dcb02e8a8e291cbd81b985d8b9dd9764c1e146b9223a1d9160431bdb28441b190409f5cadc3cd4275d9835d3712e38f52185c32f6085a518feb6ffc9b1948b3055d93a4ddd3523c162ca13fa317dd6e78afa73b7a74d6ada70e1451ccbb2feaf61a5cda482b6bab51ba56f819acc9cf4310e5800a8957d252d67f12ba5c7b472c10eff659", 0x97}, {&(0x7f0000002a80)="0c249e3e9eb7e1fb39e617175aa022d95f083683117cc726a0a431c4334b4fa3b0657d3ab87ed2b9c8ef5ef912209d09192ab851a29461e07672a500a5c2d350befda63bfab02dbcb1970c5611187c446c8e8a8d9cf0650f2178ba4a8db7662f182292321765accd0b2908e4dd1fe0acfced5c79cbfff6b87c187cbffcb34bbd93b4b5e18c4b6eee402760607aaa84b47f6894e55430bad4676e132019dab10c", 0xa0}, {&(0x7f0000002b40)="b3a17233263d7c9a6c28f404c2b3e12e309e981b13d924592924fe2aa3e4b9a481c6985d376884050cd3c78a81d6a4aca5db509142cbfc4b04314576ef28d729defd1fdd999ea3f168f68f5071e2", 0x4e}, {&(0x7f0000002bc0)="cdd2037dd4b667b2dfd5a9f2c6f6b1fc8b82560fe9bb3d8a2075f6985c53321390ffc1c236e223f35c048d409e08cdf61b2e55495fb539bafbbd9843f04d29da935b339e2616ea12de00e4a3a784204e4dd2c234a66e8609ea66b791bc46a33d5cd5cc5b4e7b05abca0aec78b48f47136c687025984b2fc49db64ef022acfc0e415e8d65b8e40bba321b44af117d2cde1c406c2f666c62977a6bd7c59cd2b4aa0b31169b4fe1285cc8c745393ea34ef0797abd90f2257efd3863ccbde5c11081fb15a4200a7caa0af9056cc8c3ff6456c76b0dddc7d1033683aec868c1a4ceb02808966b03", 0xe5}, {&(0x7f0000002cc0)="ee6492639d6f023842b4c6de61e067dd28d21e8df45a95db623fd06ed93eff9e2bc3d2c64b668c7cf7b062559530e85ebb3a2739de36f34d15d3355c6d7c601a5e73b20cc4fe93d62b6d6e3a72de1d9d6732b1344eb25a99b24a194c64bb8f82e66668e9fe464542865c2b77af0c96f49c35d236792696dbabc91aee449664e0ff4406c4b65b8441f53ed0054265925f4cede34c81eb135990348e11c9ca106310ed5aff569fe6b48c1318565517", 0xae}, {&(0x7f0000002d80)="d0255edac9cecf737e21e3a10c6c075a4dbc95c3430daf5b38eec8335c373a75440bb2c8c830ebe0df89df08ad700cb49e93e4df77f428e7a7e3af491260882adab268b61f792f56be238af54390ffe9cf6c5b1c77865bfb97f6d69264cae659731812cb31545668fc892d4d750181b8d9df7845420e364e96650dea74ab2893308685a87a962b1413c43c79ef5a0d5ce6dd0bf282b7b9e6730b9de0738833e1e8f588b071a36e26bcb03a36bde34fe2dd22da0c789157b98fe4b7ef5523861237d84b18432c13158adaff2d17bf76ca4527982d2b22225d02d9", 0xda}, {&(0x7f0000002e80)="208556f6dc6218e96f1541b70107e86658ee63d92d81544ee12e88e57eeec603850b20a8304a4c7f797a0fc0b13e6c3f29bc1dbf74cce2fa181ca235b2c8522816576d12df79db66816a8427943c433908014462bcc0420fdc9d535104222a38720dc2038fb590dc853587740d9c9455cc93a36e8ac4e6e3fe9570c3ee8af658db", 0x81}], 0x9, &(0x7f0000003000)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x28, 0x117, 0x2, 0x12, "3246b8bac19298afac56b61a22ced0268c7c"}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18}], 0x70, 0x24008004}], 0x4, 0x40000) 20:34:51 executing program 1: syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xe6, 0x440000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x40, 0x460100) 20:34:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x20000, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x121043, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)={0x9, 0x5, 0x4, 0x10, 0x5, {}, {0x2, 0xc, 0x0, 0x6, 0x7, 0x93, "500b4bc4"}, 0x6, 0x4, @fd=r5, 0x80000000, 0x0, r6}) fchdir(r3) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000100)=0x40, &(0x7f0000000140)=0x1) [ 634.319596][T27080] attempt to access beyond end of device [ 634.325241][T27080] loop2: rw=2049, want=131, limit=63 [ 634.336038][T27080] attempt to access beyond end of device [ 634.343870][T27080] loop2: rw=2049, want=132, limit=63 [ 634.357159][T27080] attempt to access beyond end of device 20:34:51 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() waitid(0x1, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c461f010481ffff0700ffffffff03003b000000380039000000380000000000000000100000030020000100000006000480d50000000600000008000000000000000200000000000100ff0100000000000008000000e68e68e9ac54d9a9a7f37da7893f77177b5bd260858bf8d5f6b04fcbdf7b37b47eeb7cd0d22da9a87afb7b7456fbc82526b79c204ea2d464b92375da7c9d4b7940c38cb4cde90ec691324d44c0daa8f409faa6ff70b6aa85eb4108c980239f354493718ea375d4b0ad568c14547d0e4bd35a5c48162ad6458d76cc504fb93b2c5911eba327f0fbc8d57eac25a1f229d856a50b3b09d21d8b4a5e8146bf47658b34c88f00"/335], 0x14f) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x33, 0x2}, 0x7) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000700)={0x2b, 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESOCT=0x0], 0x0, 0x0, 0x0}) [ 634.393269][T27080] loop2: rw=2049, want=133, limit=63 [ 634.401739][T27080] attempt to access beyond end of device [ 634.413279][T27080] loop2: rw=2049, want=142, limit=63 [ 634.419008][T27080] attempt to access beyond end of device [ 634.438622][T27080] loop2: rw=2049, want=143, limit=63 [ 634.444910][T27080] attempt to access beyond end of device [ 634.491885][ T27] audit: type=1804 audit(1584045291.331:671): pid=27111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/414/file0" dev="sda1" ino=16668 res=1 [ 634.496496][T27080] loop2: rw=2049, want=144, limit=63 [ 634.525896][T27080] attempt to access beyond end of device [ 634.531730][T27080] loop2: rw=2049, want=145, limit=63 [ 634.537595][T27080] attempt to access beyond end of device [ 634.543362][T27080] loop2: rw=2049, want=257, limit=63 [ 634.550113][ T27] audit: type=1804 audit(1584045291.331:672): pid=27111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/414/file0" dev="sda1" ino=16668 res=1 [ 634.594042][ T27] audit: type=1804 audit(1584045291.431:673): pid=27101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/492/file0/bus" dev="loop2" ino=70 res=1 20:34:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x400000000010800, 0x1, &(0x7f0000000380)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@dmask={'dmask', 0x3d, 0xffffffffffffff0f}}]}) 20:34:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000140)={{0x1, 0x0, @identifier="b83421d34c354ad1d936360f66660c38"}}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r4, r5) r6 = add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000280)={r6, 0x6e, 0xf8}, &(0x7f00000002c0)={'enc=', 'pkcs1', ' hash=', {'xxhash64\x00'}}, &(0x7f0000000380)="07c6f02e2bceeb4f87845780461931098e153da246aeb300e10ff991f78ccdd6f5e600dea9dcd76dfb6062eac7bef0fe8db339a6ee67a892757e5b5f58427865e45c92577ca9362af1853f5450d3d0f20e52d7efb7a848e2a8dc5eaa32e160df382123163bb4c6b82cca8af4c575", &(0x7f0000000400)="4d2e975aba34e93297b6f8c9818e01ac653b6f1f64553a13459bc8c0e1d00e0084dcb925cadbd5965901f58d1e85ebe54c23c385fcffcd1f0bfbf0a07eeb0c17baebc7e9225e51261e4d77a9fc42f371c154c917e3cbb0d686d943e4060634df86eea2d77a79671df415d98da8ed6a7f58c71a5e844607fec5f1a91967870f1e98aef04b1e2c6e07c2a3717d0cbb357d1a75ebd0f4c9d39fbf676b10a3a71f0104880712b0d3357da454a1e815091a5aaa074c92000c198c9df4b4f989a92dff257dc75f920ebb75aaff7a4671c323a86b63f62b92f49d829089adc7ca4793296e84bb88203281467ea478d9388cd38a88ed8ed73339f5f7") 20:34:51 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) [ 634.808529][ T27] audit: type=1804 audit(1584045291.651:674): pid=27135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/414/file0" dev="sda1" ino=16668 res=1 20:34:51 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x400, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "c34c3c459c510625039b62b5c9c94fa73150e05a"}, 0x15, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 20:34:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getdents64(r0, &(0x7f0000000080)=""/208, 0x20000150) [ 634.839232][ T27] audit: type=1804 audit(1584045291.651:675): pid=27120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/414/file0" dev="sda1" ino=16668 res=1 [ 634.869686][ T27] audit: type=1804 audit(1584045291.691:676): pid=27111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/414/file0" dev="sda1" ino=16668 res=1 20:34:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x32ee80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000140)={0x6, {0x7d07, 0x80000000, 0xf0b1, 0x6e601cf7}, {0xffff8001, 0x6, 0x8236, 0x6}, {0x100, 0x7fff}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 635.042848][T27145] attempt to access beyond end of device [ 635.055451][T27145] loop2: rw=2049, want=78, limit=63 [ 635.067331][T27145] attempt to access beyond end of device [ 635.072971][T27145] loop2: rw=2049, want=79, limit=63 [ 635.078299][T27145] attempt to access beyond end of device [ 635.083933][T27145] loop2: rw=2049, want=80, limit=63 [ 635.091105][T27145] attempt to access beyond end of device [ 635.096756][T27145] loop2: rw=2049, want=81, limit=63 [ 635.102749][T27145] attempt to access beyond end of device [ 635.108471][T27145] loop2: rw=2049, want=130, limit=63 [ 635.113962][T27145] attempt to access beyond end of device [ 635.127970][T27145] loop2: rw=2049, want=131, limit=63 [ 635.133312][T27145] attempt to access beyond end of device [ 635.143626][T27145] loop2: rw=2049, want=132, limit=63 [ 635.149034][T27145] attempt to access beyond end of device [ 635.154674][T27145] loop2: rw=2049, want=133, limit=63 [ 635.161551][T27145] attempt to access beyond end of device [ 635.170284][T27145] loop2: rw=2049, want=142, limit=63 [ 635.175626][T27145] attempt to access beyond end of device [ 635.181458][T27145] loop2: rw=2049, want=143, limit=63 [ 635.186787][T27145] attempt to access beyond end of device [ 635.198491][T27145] loop2: rw=2049, want=144, limit=63 [ 635.203840][T27145] attempt to access beyond end of device [ 635.217517][T27145] loop2: rw=2049, want=145, limit=63 [ 635.227148][T27145] attempt to access beyond end of device [ 635.237994][T27145] loop2: rw=2049, want=257, limit=63 20:34:52 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) [ 635.253903][ T27] audit: type=1804 audit(1584045292.091:677): pid=27153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/493/file0/bus" dev="loop2" ino=71 res=1 20:34:52 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, 0x0) 20:34:52 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) 20:34:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:52 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x7a00, 0x0) 20:34:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000080)='./file0\x00', 0x82, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r1, 0x40000002}}, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x8001, 0x40) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000000140)={0x43, "2e11227b7ac31bad41b364940939259f8208dceb816c43c71ec4a4edb8f98734a3d7a737a888b7641922d568e711e842e5dae7b1b18d85713b9fa7a6e994fecf4289f1639f29e6298209ba5a94f78272170cedcebd09085f0796600cdc8536e85cf3870b6844be77dad272e4684f59a9f60b658cfabeba2d6fd1f11781ffcaef"}) 20:34:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x5, 0x2, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:34:52 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 20:34:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x10000, 0x728, 0x1, &(0x7f0000000080)='&'}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) [ 635.860097][ T27] audit: type=1804 audit(1584045292.701:678): pid=27192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/494/file0/bus" dev="sda1" ino=16653 res=1 20:34:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/74) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:34:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080), 0x12d48122) 20:34:53 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, 0x0) 20:34:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x64803, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x200, 0x70bd26, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x10, &(0x7f0000000140)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r5, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r6, 0x20, 0x9, [0x3f, 0x6, 0xfd58, 0x6, 0x8000, 0x6, 0x6, 0x7, 0x101]}, 0x1a) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r7}}, 0x33) [ 636.523144][T27241] sctp: [Deprecated]: syz-executor.1 (pid 27241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.523144][T27241] Use struct sctp_sack_info instead 20:34:53 executing program 5: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x99b, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20064084) 20:34:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x400400, 0x0) sendmsg$can_raw(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@can={{0x1}, 0x4, 0x4, 0x0, 0x0, "2a7f99f7a1f0437e"}, 0x10}, 0x1, 0x0, 0x0, 0x20040001}, 0x800) ioctl$sock_netdev_private(r4, 0x89f4, &(0x7f0000000140)="5f62eca8bc20cb1721739d6638f1d9c610c2996b9cfb96c1b081111d49ead82eaa019255b4efbfad5babe72a386a3c01c08378ea649a039662690832dd81a9eba07d273d09ea497b9c6af125cada660cc63438cc8d4d2216b8360d3659ec384416dcb6b1cba3db8545788ffd510a356c3a0bd9b56d77b533ccf0bace11664a24acd4c71e431828879e64c52e648b") ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socket$can_j1939(0x1d, 0x2, 0x7) write$P9_RMKNOD(r6, &(0x7f00000002c0)={0x14, 0x13, 0x1, {0x2, 0x4, 0x1}}, 0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 636.586249][ T27] audit: type=1804 audit(1584045293.421:679): pid=27229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/495/file0/bus" dev="sda1" ino=16682 res=1 20:34:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000100000a000000000800040000000000000000000000fbffffff00000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896243f87216a459d91939be593f7710aa00ffe8001700410000d4c5b92416a1c33d0a83385242d53c7b2a7803f03a12abc4a1ed643eda0bc6de9d3db06af952613a4b917b582b2e34c536f599513cd157981d2e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 20:34:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0}], 0x1, 0xffd0) [ 636.950877][T27241] sctp: [Deprecated]: syz-executor.1 (pid 27241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.950877][T27241] Use struct sctp_sack_info instead 20:34:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:34:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffc317, 0x0, 0x2}, 0x8}, 0x20, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 637.039301][T27264] attempt to access beyond end of device [ 637.052044][T27264] loop2: rw=2049, want=78, limit=63 [ 637.076858][T27264] attempt to access beyond end of device 20:34:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000a00)='smaps_rollup\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r1, r0, 0x0, 0x80000005) [ 637.131645][T27264] loop2: rw=2049, want=79, limit=63 [ 637.136989][T27264] attempt to access beyond end of device [ 637.143159][T27264] loop2: rw=2049, want=80, limit=63 [ 637.148576][T27264] attempt to access beyond end of device [ 637.154379][T27264] loop2: rw=2049, want=81, limit=63 [ 637.161629][T27278] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 637.191033][T27264] attempt to access beyond end of device [ 637.225809][T27264] loop2: rw=2049, want=130, limit=63 [ 637.257836][T27264] attempt to access beyond end of device [ 637.263982][T27278] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:34:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4) setfsuid(r7) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000140)={0x101, 0x3, {r5}, {r7}, 0x1, 0x81}) fcntl$setownex(r2, 0xf, &(0x7f0000000180)={0x1, r8}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r9, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setfsgid(r10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r11}}, 0x33) [ 637.310602][T27288] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12336 sclass=netlink_xfrm_socket pid=27288 comm=syz-executor.5 [ 637.328552][T27264] loop2: rw=2049, want=131, limit=63 [ 637.333986][T27264] attempt to access beyond end of device [ 637.339797][T27264] loop2: rw=2049, want=132, limit=63 [ 637.345213][T27264] attempt to access beyond end of device [ 637.351938][T27264] loop2: rw=2049, want=133, limit=63 20:34:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffc317, 0x0, 0x2}, 0x8}, 0x20, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 637.357489][T27264] attempt to access beyond end of device [ 637.363210][T27264] loop2: rw=2049, want=142, limit=63 [ 637.375813][T27264] attempt to access beyond end of device [ 637.381658][T27264] loop2: rw=2049, want=143, limit=63 [ 637.397500][T27264] attempt to access beyond end of device 20:34:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4ef81, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x2, 0x2, 0x4, 0x20000000, 0x0, {0x0, 0x7530}, {0x4, 0xe, 0xfc, 0x0, 0x4, 0x94, "a4797ea3"}, 0x7de, 0x2, @offset=0x2, 0x10a, 0x0, r4}) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000001c0)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 637.407643][T27264] loop2: rw=2049, want=144, limit=63 [ 637.413019][T27264] attempt to access beyond end of device [ 637.418827][T27264] loop2: rw=2049, want=145, limit=63 [ 637.428492][T27264] attempt to access beyond end of device [ 637.450564][T27264] loop2: rw=2049, want=257, limit=63 20:34:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000a00)='smaps_rollup\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r1, r0, 0x0, 0x80000005) [ 637.465946][ T27] audit: type=1804 audit(1584045294.301:680): pid=27280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/496/file0/bus" dev="loop2" ino=72 res=1 20:34:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x9, 0x283) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff7c, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x3c, 0xa}}, 0xe) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x400080}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x1, 0x8203, 0x68, 0x9df, r5}, &(0x7f00000001c0)=0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) [ 637.554701][T27303] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:34:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffc317, 0x0, 0x2}, 0x8}, 0x20, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) mmap$perf(&(0x7f0000001000/0x10000)=nil, 0x10000, 0x2, 0x100010, 0xffffffffffffffff, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000000380)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @empty, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="18cbf92ee4c809d68dd2e97f391434609ce6246cfc24f7f9b892bea8e83657098cc041a8a1228c4d663a9803e099de76bf6d428e04b75549054ad243fed0f4825e0fbbbba2a008f84341a772784c0e41a7c0e551f76b64993dd58fdf3f332250f9c25e1bd19565138dbe", 0x6a}, {&(0x7f00000001c0)="51d026bc5b17cd0cef790b57c9926f85c29af8b3f3575e9082b5478efeede86cc4d2cd842654b1538399e12a12", 0x2d}], 0x2}, 0x20010) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) connect$bt_sco(r3, &(0x7f0000000080), 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:34:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) close(r2) r3 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x2, 0x7]}, &(0x7f00000000c0)=0x8) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) [ 637.880114][T27321] attempt to access beyond end of device [ 637.919998][T27321] loop2: rw=2049, want=78, limit=63 [ 637.933380][T27321] attempt to access beyond end of device [ 637.941200][T27321] loop2: rw=2049, want=79, limit=63 [ 637.946687][T27321] attempt to access beyond end of device [ 637.953198][T27321] loop2: rw=2049, want=80, limit=63 [ 637.959807][T27321] attempt to access beyond end of device [ 637.966466][T27321] loop2: rw=2049, want=81, limit=63 [ 637.972604][T27321] attempt to access beyond end of device [ 637.980102][T27321] loop2: rw=2049, want=130, limit=63 [ 637.985729][T27321] attempt to access beyond end of device [ 637.991974][T27321] loop2: rw=2049, want=131, limit=63 [ 637.995349][T27334] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 637.997848][T27321] attempt to access beyond end of device [ 638.013461][T27321] loop2: rw=2049, want=132, limit=63 [ 638.018832][T27321] buffer_io_error: 44 callbacks suppressed [ 638.018843][T27321] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 638.033223][T27321] attempt to access beyond end of device [ 638.039076][T27321] loop2: rw=2049, want=133, limit=63 [ 638.044376][T27321] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 638.052152][T27312] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12336 sclass=netlink_xfrm_socket pid=27312 comm=syz-executor.5 [ 638.065221][T27321] attempt to access beyond end of device [ 638.071816][T27321] loop2: rw=2049, want=142, limit=63 [ 638.082211][T27321] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 638.092262][T27321] attempt to access beyond end of device [ 638.098164][T27321] loop2: rw=2049, want=143, limit=63 [ 638.103623][T27321] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 638.112366][T27321] attempt to access beyond end of device [ 638.118384][T27321] loop2: rw=2049, want=144, limit=63 [ 638.123821][T27321] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 638.132700][T27321] attempt to access beyond end of device [ 638.138539][T27321] loop2: rw=2049, want=145, limit=63 [ 638.144047][T27321] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 638.153182][T27321] attempt to access beyond end of device [ 638.191526][T27321] loop2: rw=2049, want=257, limit=63 20:34:55 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@sha1={0x1, "740946aff339b0f041abb257d5a5d4452bd87ddd"}, 0x15, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:34:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffc317, 0x0, 0x2}, 0x8}, 0x20, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:55 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {0x81, 0x5}, {}, @quote}], 0x1c) 20:34:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = open(&(0x7f0000000080)='./file0\x00', 0x90040, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r7, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x2f}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c022) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x0, 0x0, 0x0, {0xc}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x44880) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1, 0x7fff}}, 0x10) 20:34:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000740)="892d8c350905b0f9273f4012c525028f052a2683119573e6bec241a1a95a4d13261068f7a8d40b18c518aeb38c23b7", 0x2f}, {&(0x7f0000000780)="e75c29c9d862ec03548e6c0d33c1401392b46e78c7ee85d579", 0x19}], 0x3}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @pic={0x3, 0x0, 0x6, 0xce, 0x81, 0x2, 0x81, 0x0, 0x3f, 0x0, 0x7f, 0x3, 0x6, 0x1, 0x1, 0xc4}}) fchdir(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00020000", @ANYRES16=r8, @ANYBLOB="010000400000000000000000000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x104, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) ioctl$KVM_RUN(r3, 0xae80, 0x0) r10 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getpeername(r10, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x80) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r11, r11, &(0x7f0000000000), 0x8080fffffffe) sendmsg$IPSET_CMD_DEL(r11, &(0x7f0000000900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)={0x4c, 0xa, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004855) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 638.461461][T27343] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:34:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) 20:34:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffc317, 0x0, 0x2}, 0x8}, 0x20, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 638.706542][T27365] attempt to access beyond end of device [ 638.715334][T27365] loop2: rw=2049, want=78, limit=63 [ 638.721153][T27365] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 638.730115][T27365] attempt to access beyond end of device [ 638.735865][T27365] loop2: rw=2049, want=79, limit=63 [ 638.741665][T27365] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 638.750952][T27365] attempt to access beyond end of device 20:34:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x34}}, 0x0) [ 638.757968][T27365] loop2: rw=2049, want=80, limit=63 [ 638.763296][T27365] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 638.774004][T27365] attempt to access beyond end of device [ 638.780806][T27365] loop2: rw=2049, want=81, limit=63 [ 638.786118][T27365] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 638.795150][T27365] attempt to access beyond end of device [ 638.801742][T27365] loop2: rw=2049, want=130, limit=63 [ 638.808722][T27365] attempt to access beyond end of device [ 638.821158][T27365] loop2: rw=2049, want=131, limit=63 [ 638.831464][T27365] attempt to access beyond end of device [ 638.839880][T27365] loop2: rw=2049, want=132, limit=63 20:34:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffc317, 0x0, 0x2}, 0x8}, 0x20, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x660e40) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r6 = dup(r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x2900, 0x0) ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f00000002c0)={0x9, "fe9e1a1ad455571749b1f2eb793ac7c3a89348329b1e0d50902b2dddd9f7eb97", 0x3, 0x800, 0x8, 0x1c5dec2e, 0x4, 0x4, 0x4}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010000000000000000001a0000000700210062620000d1afcc6a90e8e7824a73dcaa8a61def35a0cbd5d6db8f594a2bd19fa47c842e7963a9fc79eadedcd127691d290c1fce08ec0b557ef60c0f9efb9d3527574e644606412ad438acf80b50894e943bf14d172d198c3dba1cf591127e61c3f1eaeec2ee17c5f7e1988135194c83e1fa93b29e3552de49fccacf8"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r9, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x313}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1ff}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xff30}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0xfff}}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xb, 0x13, "11d1821cedfc2d"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x4c80) [ 638.866260][T27365] attempt to access beyond end of device [ 638.897752][T27365] loop2: rw=2049, want=133, limit=63 [ 638.921101][T27365] attempt to access beyond end of device [ 638.926845][T27365] loop2: rw=2049, want=142, limit=63 [ 638.934830][T27365] attempt to access beyond end of device [ 638.940990][T27365] loop2: rw=2049, want=143, limit=63 [ 638.946361][T27365] attempt to access beyond end of device [ 638.952417][T27365] loop2: rw=2049, want=144, limit=63 [ 638.958164][T27365] attempt to access beyond end of device [ 638.963853][T27365] loop2: rw=2049, want=145, limit=63 [ 638.969837][T27365] attempt to access beyond end of device [ 638.975558][T27365] loop2: rw=2049, want=257, limit=63 [ 638.991951][T27389] Unknown ioctl -1068214755 20:34:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffc317, 0x0, 0x2}, 0x8}, 0x20, 0x1, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:56 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x22201, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000002c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000140)={0x0, 0x7, 0x4, 0x400, 0xfffff990, {0x77359400}, {0x4, 0x0, 0xff, 0x1, 0x0, 0x8f, "20d58793"}, 0x0, 0x4, @planes=&(0x7f0000000100)={0xf8d8, 0x6, @userptr=0x6, 0xffffffac}, 0x101, 0x0, r1}) bind$x25(r4, &(0x7f00000001c0)={0x9, @null=' \x00'}, 0x12) 20:34:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:56 executing program 5: io_submit(0x0, 0xfffffdc4, 0xfffffffffffffffd) 20:34:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x36, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000080)=0x1, &(0x7f0000000140)=0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:34:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffc317, 0x0, 0x2}, 0x8}, 0x20, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:56 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0xcbbec8df9c742b0f}, 0x1c}}, 0x0) [ 639.342798][T27389] Unknown ioctl -1068214755 [ 639.476398][T27416] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:34:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffc317, 0x0, 0x2}, 0x8}, 0x20, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 639.562662][T27409] attempt to access beyond end of device [ 639.594232][T27409] loop2: rw=2049, want=78, limit=63 20:34:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) [ 639.644934][T27429] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 639.653561][T27409] attempt to access beyond end of device 20:34:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) sendmsg$nfc_llcp(r3, &(0x7f0000002700)={&(0x7f0000000140)={0x27, 0x1, 0x1, 0x6, 0x1f, 0x7, "d48c6cff2c4ed89f610b398a0d12c1991e78ede13e7cd65cf275097238aee5685c0720f20356decab0e4e89d744ae8dea0984fcfeae5a481144c67b806e485", 0x1b}, 0x60, &(0x7f0000001540)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="58d4a75045080fbadb76188478b264d2345634d768c5ab7c23bf1c7b627640f7a79a048b37563bdf5b5749f61b308b1613569660daa5fdd9c6d6caf4bbcda3807c7137f2d117f18e0065281ff8461d42bf1e250e51f063c171c269adefb8c2c65479166f8f9b3cd1bb6413ceaa44610cfbe31ada5e59b3086c5464f9b3affe3e29d8601b0c6303e39ab4494849b3fb6d71ae3f2fbcf54f612bef490e456ffc2e687ace46a6011631be264da47f603225202f567a60cad20d0995bbfb5a9c1d793c0b6f656fa9a90c5f650aa462326be9675a08db4a32b46ee1312d3e12edbc87aa11517156b7590f6a2d5a421f4b98e8", 0xf0}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f00000001c0)="04a098e07c9acdfaa45232e2342675d41141", 0x12}, {&(0x7f00000013c0)="e1a007f67e18baee69a5c657b430374de3d7991d44e5e7bf385db32d4f93532c6137e54c38a9a5f7962cac7f2a85deaf96977c396daf17c40aeeac085f8fd3ffe33f556543bf149d60f5e3465674599d489d7e8eceaa0d331aae0476ab0fc1d3fa8a706cdddf27188e8533d5188a4457123f069dabddf0cbad537210aa5ea4de2bbe56c753df489c98e6c0808f6d0454e9ccdf12d9f03309bf2097316f0fc6a13c10850bad6979922682268a20a84972d760a2271223a6", 0xb7}, {&(0x7f0000001480)="c299cce3ee783de0da404e2a9d6b27c5352ad7ae8c73414ac9e727047d05904b0ce50625f6d11a5e54e7b17e050255afcd277fa5654b3a2ca4513ea92bd9266d6cb645a39a077ec6", 0x48}, {&(0x7f0000001500)}, {&(0x7f0000002600)="35a4b2c61301f32c4a79b6f78d3fe254b157b505c8f5d8a2976e6b3f2e9840ddba71289f07a7ca0a3e8954698d5dfe7ac3dbbabc0ceef061141c8e7c4bddcd75a4a65b98aebdc54bc3050400a3fd71566b299102c19d21f51b77c3b2b2c36669d789e1c13c385e2d2392a867e57f0695dbbb915c6e211443e98eb73a1bccb2f9f9fa4eafa7e0a2a78b22d94af01e1d6d2e5d504cda22739733896625a88a37215f493155d8605444465e55fa38e7d20d2588faeb734ef417", 0xb8}], 0x8, &(0x7f00000026c0)={0x18, 0x0, 0x63b6ea3a, "5058fd"}, 0x18, 0x20004050}, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000080)={0x800, 0x80000000, 0x3, 0xfbfbfbfb}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 639.704889][T27409] loop2: rw=2049, want=79, limit=63 20:34:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffc317, 0x0, 0x2}, 0x8}, 0x20, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 639.747016][T27409] attempt to access beyond end of device 20:34:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x4c, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x3}}, 0xac) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x401, 0x40) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xb8, @empty, 0x40000}, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}, r1, 0x6}}, 0x48) [ 639.810959][T27409] loop2: rw=2049, want=80, limit=63 [ 639.826738][T27409] attempt to access beyond end of device [ 639.854579][T27409] loop2: rw=2049, want=81, limit=63 [ 639.877192][T27409] attempt to access beyond end of device [ 639.882850][T27409] loop2: rw=2049, want=130, limit=63 20:34:56 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff4e34443227c5d388144f479d005aff"}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') sendfile(r1, r2, 0x0, 0xa808) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="000000000009000000000000000001006272696467655f736c617665000000000c0005800500190000000000"], 0x44}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={@empty, @loopback, @ipv4={[], [], @empty}, 0x9, 0x0, 0x0, 0x43ddbeb75cc3cbd, 0x1, 0x4820221, r8}) socket$nl_netfilter(0x10, 0x3, 0xc) [ 639.926377][T27409] attempt to access beyond end of device [ 639.941344][T27409] loop2: rw=2049, want=131, limit=63 [ 639.986304][T27452] x_tables: duplicate underflow at hook 2 [ 640.023000][T27409] attempt to access beyond end of device [ 640.031206][T27454] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 640.046235][T27452] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.5'. [ 640.071561][T27409] loop2: rw=2049, want=132, limit=63 [ 640.095868][T27409] attempt to access beyond end of device [ 640.101779][T27409] loop2: rw=2049, want=133, limit=63 [ 640.102739][T27452] x_tables: duplicate underflow at hook 2 [ 640.110091][T27409] attempt to access beyond end of device 20:34:57 executing program 3: io_setup(0x4ec7b07c, &(0x7f0000000100)=0x0) io_pgetevents(r0, 0x7, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0xffff]}, 0x8}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 640.157187][T27409] loop2: rw=2049, want=142, limit=63 [ 640.162547][T27409] attempt to access beyond end of device [ 640.237533][T27409] loop2: rw=2049, want=143, limit=63 [ 640.242906][T27409] attempt to access beyond end of device [ 640.248610][T27409] loop2: rw=2049, want=144, limit=63 [ 640.253937][T27409] attempt to access beyond end of device [ 640.303188][T27409] loop2: rw=2049, want=145, limit=63 [ 640.326447][T27409] attempt to access beyond end of device [ 640.332197][T27409] loop2: rw=2049, want=257, limit=63 [ 640.349510][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 640.349522][ T27] audit: type=1800 audit(1584045297.191:685): pid=27430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="loop2" ino=75 res=0 20:34:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) 20:34:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20010001, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) tkill(r1, 0x1000000000016) 20:34:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:34:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 640.491444][T27477] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 640.639255][T27486] attempt to access beyond end of device [ 640.645059][T27486] loop2: rw=2049, want=78, limit=63 [ 640.652202][T27486] attempt to access beyond end of device [ 640.658367][T27486] loop2: rw=2049, want=79, limit=63 [ 640.664473][T27486] attempt to access beyond end of device [ 640.671589][T27486] loop2: rw=2049, want=80, limit=63 [ 640.676965][T27486] attempt to access beyond end of device [ 640.683829][T27486] loop2: rw=2049, want=81, limit=63 [ 640.690035][T27486] attempt to access beyond end of device [ 640.695789][T27486] loop2: rw=2049, want=130, limit=63 [ 640.702040][T27486] attempt to access beyond end of device [ 640.707909][T27486] loop2: rw=2049, want=131, limit=63 [ 640.713360][T27486] attempt to access beyond end of device [ 640.719266][T27486] loop2: rw=2049, want=132, limit=63 [ 640.724728][T27486] attempt to access beyond end of device 20:34:57 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002740)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) [ 640.738741][T27486] loop2: rw=2049, want=133, limit=63 [ 640.749810][T27486] attempt to access beyond end of device [ 640.759991][T27486] loop2: rw=2049, want=142, limit=63 [ 640.767267][T27486] attempt to access beyond end of device [ 640.792658][T27490] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 640.807481][T27486] loop2: rw=2049, want=143, limit=63 [ 640.827436][T27486] attempt to access beyond end of device [ 640.834505][T27486] loop2: rw=2049, want=144, limit=63 20:34:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:57 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 640.861686][T27486] attempt to access beyond end of device [ 640.894371][T27486] loop2: rw=2049, want=145, limit=63 20:34:57 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000100)={0x6, 0xb, 0x4, 0x1000, 0x1, {r5, r6/1000+10000}, {0x1, 0x8, 0x4, 0x20, 0x1, 0x5, "c008d664"}, 0x4, 0x4, @userptr=0x8, 0x1, 0x0, 0xffffffffffffffff}) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f00000001c0)={0x1, 0x2, 0x340, 0x2, 0x7, "a9776b94a7284b5cf397263611bf99a4ccadcb", 0x80000000, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r8, r2) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000080)={0x7, 0x1, 0xfa00, {r1, 0x7a67}}, 0x10) [ 640.937544][T27486] attempt to access beyond end of device [ 641.007333][T27486] loop2: rw=2049, want=257, limit=63 [ 641.024516][ T27] audit: type=1804 audit(1584045297.861:686): pid=27492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/500/file0/bus" dev="loop2" ino=76 res=1 20:34:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000080)=0x3aa) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 641.067352][T27508] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:34:58 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0xff, 0x1, 0x4, 0x4000, 0xf8, {0x77359400}, {0x3, 0x0, 0x9, 0xf, 0x0, 0x1f, "927986ac"}, 0x3, 0x6, @offset=0x45, 0x8, 0x0, r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002600)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002640)={0x28, r5, 0x1, 0x0, 0x0, {0x6}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x8080) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x64, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x39}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000300), 0x4) 20:34:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:58 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r0}}, 0x33) [ 641.592540][T27536] attempt to access beyond end of device [ 641.598428][T27536] loop2: rw=2049, want=78, limit=63 [ 641.611944][T27536] attempt to access beyond end of device [ 641.620051][T27536] loop2: rw=2049, want=79, limit=63 [ 641.627243][T27536] attempt to access beyond end of device [ 641.627256][T27536] loop2: rw=2049, want=80, limit=63 20:34:58 executing program 5: openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/86, 0x56}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) [ 641.627319][T27536] attempt to access beyond end of device [ 641.627330][T27536] loop2: rw=2049, want=81, limit=63 [ 641.627391][T27536] attempt to access beyond end of device 20:34:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x10, &(0x7f0000000140)={r6}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x8, 0x2, 0x5f, 0x15, 0x9, 0x4, 0x4, r6}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:34:58 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x101480, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000100)=""/228, 0xe4}, &(0x7f0000000200), 0x41}, 0x20) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000000c0)={0x2, r3}) [ 641.734833][T27536] loop2: rw=2049, want=130, limit=63 [ 641.816970][T27536] attempt to access beyond end of device [ 641.847184][T27536] loop2: rw=2049, want=131, limit=63 [ 641.852552][T27536] attempt to access beyond end of device [ 641.938319][T27536] loop2: rw=2049, want=132, limit=63 [ 641.943992][T27536] attempt to access beyond end of device [ 641.965054][T27536] loop2: rw=2049, want=133, limit=63 20:34:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 641.989708][T27536] attempt to access beyond end of device [ 641.997753][T27536] loop2: rw=2049, want=142, limit=63 [ 642.005669][T27536] attempt to access beyond end of device [ 642.011656][T27536] loop2: rw=2049, want=143, limit=63 [ 642.029671][T27536] attempt to access beyond end of device [ 642.038704][T27561] sctp: [Deprecated]: syz-executor.4 (pid 27561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.038704][T27561] Use struct sctp_sack_info instead [ 642.057973][T27536] loop2: rw=2049, want=144, limit=63 [ 642.065845][T27536] attempt to access beyond end of device [ 642.094206][T27536] loop2: rw=2049, want=145, limit=63 20:34:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) getresuid(0x0, 0x0, &(0x7f0000000380)) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, &(0x7f0000000000)="2088f39c5f3eb0bda7a300babe2bfe12b33cdaee9e3cc0ff5c99b64afd6dea9458d7d7622e27f1d6327ec5ac066b98bb7d58590e03c8b437a83ffc7a6b437c823f1a52040fa1a9bf56cd2142d732396c3643f58587143ad214a951605569a115b9efd8b8f9c3f1bf42d7bc5efc"}, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000001c0)={'lo\x00'}) [ 642.116951][T27536] attempt to access beyond end of device [ 642.138107][T27536] loop2: rw=2049, want=257, limit=63 [ 642.153300][ T27] audit: type=1804 audit(1584045298.991:687): pid=27547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/501/file0/bus" dev="loop2" ino=77 res=1 20:34:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 642.282819][T27567] sctp: [Deprecated]: syz-executor.4 (pid 27567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.282819][T27567] Use struct sctp_sack_info instead 20:34:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:34:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = accept$ax25(r2, &(0x7f0000000100)={{0x3, @null}, [@rose, @rose, @rose, @null, @netrom, @default, @netrom, @netrom]}, &(0x7f0000000180)=0x48) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f00000001c0)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:34:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400, 0x0) 20:34:59 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8906, 0x0) 20:34:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffdf0, &(0x7f00000001c0), 0x8}, 0x2b3644eb2dd303b3) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000001c0), &(0x7f00000002c0)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000140)={0xfffffffc, "c1f083b1e0dbbd23c5d9196ffe93313c78836b7e86509dcc183644b7cbd18ae5", 0x1, 0x1}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) shutdown(r2, 0x9f401a2e49752de2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 642.485077][T27581] xt_check_match: 4 callbacks suppressed [ 642.485091][T27581] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 642.520041][T27589] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:34:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 642.644897][T27607] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:34:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) finit_module(r3, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x1) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) [ 642.696615][T27611] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 642.766080][ T27] audit: type=1804 audit(1584045299.601:688): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/502/file0/bus" dev="sda1" ino=16610 res=1 [ 642.771658][T27615] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:34:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:34:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[]}}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)}, 0x40000001) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc0002, 0x0) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000080)='batadv0\x00', 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r5}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20:34:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 642.902535][T27625] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:34:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 642.982594][ T27] audit: type=1804 audit(1584045299.821:689): pid=27622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir549436467/syzkaller.auANfP/486/file0" dev="sda1" ino=16801 res=1 [ 643.056801][T27631] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:00 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x2080, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$capi20_data(r2, &(0x7f0000000380)={{0x10, 0xca, 0x3, 0x80, 0x14, 0x4}, 0x1000, "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"}, 0x1012) r4 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001100)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {0x0, 0x0, 0x0, @empty}}}}}, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$CAPI_GET_PROFILE(r5, 0xc0404309, &(0x7f0000000280)=0xbe37) fchdir(r3) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)={r6}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, &(0x7f00000013c0)={0x8302, "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"}) [ 643.148469][ T27] audit: type=1804 audit(1584045299.931:690): pid=27627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir549436467/syzkaller.auANfP/486/file0" dev="sda1" ino=16801 res=1 [ 643.221746][ T27] audit: type=1804 audit(1584045300.061:691): pid=27644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/503/file0/bus" dev="sda1" ino=16713 res=1 [ 643.336735][T27651] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:00 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) 20:35:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:00 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x1, 0xfa00, {r1, 0xfffffffb}}, 0x10) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4) setfsuid(r5) r6 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000400000000000004000000000000000300000000000000010000000000000006000000", @ANYRES32, @ANYBLOB="94a09c40f16e75c177f26c29c938b29ab820d49d191b631aea8d7666676db746e2f879cd8947165d9c0ffb2948b4a03acf7faf9c8bd378d50f1ec94174a22a7a282398542131246b21af9a3cf3c5c0f77e6622447c812c0bc7f98cb155c43395d478ef5e1a1d44cdb82f86351f30478c30bf7c18fc98b193d000094f", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fffeffff03000000000000000100000000000000010100000000000008000000050000002f5d766d6e657431030000000000000000000000000000003f000000000000001f00000000000000080000005600000002000000000000000400000000000000080000000000000005000000000000000500000000000000003b000000000000080000000180ffff0400000003000000feffffff", @ANYBLOB="06000000ffffff77000000000300000001000080ffffffff0e000008090000002f64657562695f6374726c00000005000000000000000300000000000000000000006a00000000010000000000000900000085ff6e12010000000000000000000000007dcfff070000000000000000080000000000000700000000000000030000000000000040000000060000510339236bcfe08ad7b6eb06386ae17cf3d07ffef1d106a85ca5fd7d72ad7114e41b7cf58437ff00000069ff62709eede9d3006ed5b63cbaf0a665fb943724f4edffb32569bd65ce0a16c232984dbef548c8ff98b1560037384bbc4ef4c8d21eb282a7bd6c8ca6fc105bb44b2eeaa20bff7f0be17f57f4d65d96cc59c88400000000000000000074a3be13865496f7231ab187bb07ca09fa8aac9488ee3b691c4ceef5ac4ad7dbc2a5f7f4ac91dd5501549ae3a3e173feb1de0395ed536d2e9b858a3293228b45ca248e672cf93bcfd7e49a0a861e76f79cd9ec4706effd882ae5fbd7aafef40d53c1bb2d1727274e2ac32b8d83f42be19c263258938d12748dedc5d2a33bc51b9e37285c8307802e8f58b6a9593c109ac75a80b54783de03c3f0ca714cb5ed848adf22c214c71f181e0071ed5fcc171c233acdc1645e2a7a3e4e5c9d1ea04c60ce1a135dcd89d3f2b6f1beb07b131207265429aec9da613696e1ddbb72aea5", @ANYRES32, @ANYRES32, @ANYBLOB="070000007f000000000000000300000000000000010001000000000012000000070000002e2f6367726f"], 0x371) chown(&(0x7f0000000100)='./file0\x00', r5, r6) [ 643.644303][T27677] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 643.709588][ T27] audit: type=1804 audit(1584045300.541:692): pid=27680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/504/file0/bus" dev="sda1" ino=16801 res=1 20:35:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 643.901099][ T27] audit: type=1804 audit(1584045300.741:693): pid=27691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/424/file0" dev="sda1" ino=16726 res=1 20:35:00 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 643.998754][T27693] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 644.183991][ T27] audit: type=1804 audit(1584045301.021:694): pid=27708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/505/file0/bus" dev="sda1" ino=16696 res=1 20:35:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000a80)=""/52, &(0x7f0000000ac0)=0x34) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x1, 0x0) restart_syscall() r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4) setfsuid(r9) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0x5, 0x7, &(0x7f00000008c0)=[{&(0x7f0000000340)="d98398dd5138cea833428e3ad4de83c814efe1ed8780d58a19da14ba39d5415790bc9730222f35bd04936154e5202f236483559bf1f1d2180119cf312bc2b22a92579f53f29b9e1eea66295975ea15b296ed6eb8e93413900c7d7b320d9be6750d15685db66b3ec235c6b661458eec9034b326801845182e21b257c05bf9f6ec1ef6ad2b65f97fd9d81827c6edf891ba91b6a728b1ea22c1c83d399c5f87b9be48283d56bf368d3510237354a0c97afead3d166dde2e64340845a09ea58a633d852c", 0xc2, 0x80000000}, {&(0x7f0000000440)="05c590cf4d4a7e6c07092018f19b9559bafe437ec51564092532079f4f6ad0b3aa3fbfa90270673976b7a94aa82154a93738cb4ca3c43b96bcfd4cf1573454aaa3d3f99a0eb846306c8a25b272e83cf9dc379828e361fc0a069d8198a90a4e02bc4420ad94a86b176c860e7f6f3a47b3fa49da5b60a2ad3f353354aeae9288bb2134e3fe2f3ae8ac6c5456d511359ca3a12427be665cb30c55fbb8ca2cc0201f9ea62f605ce9aef1412e775d839d005e44a0702f501eaf55d1fc74cc5277ba8effa342b8da208fa4542ed7cb6a9a435155dc099e8fd7", 0xd6, 0x6}, {&(0x7f0000000540)="ef1233f7151e440db702ba1ff08420b1ff1b498e6dafc6518ffc06c8b465c95630f806cc5107fbfedad285dfa22819934812ec9006a1fac2473f999c2c095bc09fe41c7974ee78b1b19a9996a5ab0aca03671f473373747bfe3c18c3e2752c0f97df1a0494c43a8f5705f4da7d921a890c21ddf5ad5a3f5152272dda2206651ea266e9db583e51bf410e21f425dee63fb53bb74bc443170e18003e8679cf3d5150d31ecee2a3f5de20881b46a1818555023016", 0xb3, 0xff}, {&(0x7f0000000600)="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", 0xfd, 0x1}, {&(0x7f0000000700)="a9add4e971c0295e1ee23f4f225894e7454da00e10a88b51cf60443e146d7a4d3209911f79217c305c30ee6522f0d26fa9cbf99e1ec030364112a97e9b727d1f552769209dc184a733de2c37edc6de2b537465c0edfe5818e8899a0e6f5c3068ed5009eb6ff3577d0014618fe8e8b2e556d7fa1dff4ca95eaa5a877a92d91f0ba597885ba47f2214aa98dc2dc3a48c9c35fdc5b5e4272733e7474c57634602ba3631d19699453c64c3930fe1ddede4e03737052a6fd7ff011f", 0xb9, 0x80}, {&(0x7f00000007c0)="04cfc78bf6db9241e43e57082cabda98732e45803ff0c9685a5a3f55fa97e5d07695d69788b500bde0d9ff068f31b92fb0196a7fe845c48e15596b5cd30f3ec0ff9f1ad4be9ebf0d92c2abad1be5db87a28143b1117c854bbd6256", 0x5b, 0x336}, {&(0x7f0000000840)="cc60f0556a1cfbad2f88ea545563903094309bb667345f412343c79adb41149e51be5c594b0021c880506b9f8f3c4499367af9dcd259eccf32ef2aece668ddd1ad56891d6fdfb240373dc9a97dd2f7e470fede28d1f21d4acae3ab1b5fed93e07dd2f4a14b4920", 0x67}], 0xc408, &(0x7f0000000980)={[{@barrier='barrier'}, {@lazytime='lazytime'}, {@nobh='nobh'}, {@bsdgroups='bsdgroups'}], [{@dont_measure='dont_measure'}, {@fowner_gt={'fowner>'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x40}}, {@seclabel='seclabel'}, {@uid_lt={'uid<', r7}}, {@dont_hash='dont_hash'}, {@uid_gt={'uid>', r9}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcs\x00'}}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 20:35:01 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000002c0)={{0x8, 0x81}, 'port1\x00', 0x0, 0x15000a, 0x6, 0xa6, 0xe3, 0x2, 0x7, 0x0, 0x1}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) close(r4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(r6, r5, &(0x7f0000000000), 0x8080fffffffc) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r11, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) fsetxattr(r8, &(0x7f0000000380)=@known='trusted.overlay.origin\x00', &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x11, 0x1) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000053c07bc33760036", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0xe) ptrace$cont(0x18, r7, 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x2000000000, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000030301010000000000000000ff000006"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4004) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:01 executing program 5: [ 644.354319][T27711] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:01 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$void(r6, 0xc0045878) setfsuid(r5) setreuid(r3, r5) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) 20:35:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:01 executing program 5: 20:35:01 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0x4}}, 0x20) 20:35:01 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:01 executing program 5: 20:35:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) write$P9_RREADDIR(r3, &(0x7f00000002c0)={0x6e, 0x29, 0x1, {0x7f, [{{0x40, 0x2, 0x4}, 0x0, 0x8, 0xd, './file0/file0'}, {{0x40, 0x3, 0x3}, 0xfffffffffffffffe, 0x5, 0x7, './file0'}, {{0x2, 0x1, 0x3}, 0x7, 0x9e, 0x7, './file0'}]}}, 0x6e) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000080)=0xbb) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r6 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x1, 0x404000) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000180)) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 20:35:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000100)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev={0xfe, 0x80, [], 0x10}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e21, 0xc7f, 0x4e22, 0x4, 0x2, 0x20, 0x80, 0x2b, 0x0, r6}, {0xdb21, 0x1, 0x5, 0x7e7d, 0xfffffffffffff801, 0x5, 0x80000001, 0x8}, {0x82, 0x1, 0x6, 0x100000001}, 0x1, 0x6e6bb2, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d6, 0x33}, 0x8, @in6=@loopback, 0x3506, 0x7, 0x2, 0x5, 0x4, 0x80}}, 0xe8) 20:35:04 executing program 5: 20:35:04 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0x2, "637b27f830b880d998516a0e44d9bf2522d06c4bf2e041f801ee52d8c820dde1", 0x3, 0x1e, 0x2, 0x0, 0x2}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) 20:35:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xcbdce93d) bind$can_raw(r4, &(0x7f0000000600)={0x1d, r7}, 0x10) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000640)={0x1, 0x0, @pic={0x1, 0x80, 0x0, 0x67, 0x4, 0x8f, 0x2, 0x3, 0xd, 0x7, 0x0, 0x81, 0x81, 0x80, 0x6, 0x8}}) 20:35:04 executing program 5: [ 647.510876][T27790] xt_check_match: 3 callbacks suppressed [ 647.510890][T27790] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 647.547902][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 647.547917][ T27] audit: type=1804 audit(1584045304.391:701): pid=27786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/508/bus" dev="sda1" ino=16735 res=1 20:35:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:04 executing program 5: 20:35:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 647.704678][T27805] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:04 executing program 5: [ 647.797341][T27812] FAT-fs (loop2): bogus number of reserved sectors [ 647.804249][T27812] FAT-fs (loop2): Can't find a valid FAT filesystem [ 647.838494][T27818] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 647.872715][ T27] audit: type=1804 audit(1584045304.711:702): pid=27812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/509/file0/bus" dev="sda1" ino=16750 res=1 20:35:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x0, @initdev}, r3, 0x80}}, 0x48) r4 = dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000400", @ANYRES16=r9, @ANYBLOB="010000000000000000000300000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) splice(r6, &(0x7f00000001c0)=0xe6ce, r0, &(0x7f0000000200)=0x3, 0x9, 0x1) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r12 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCINQ(r12, 0x541b, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x101, @empty}, {0xa, 0x4, 0x0, @initdev, 0x8}, r11}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r11}}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0xdb, "98eebab1b91f76b09eb9d0ff121df6e0a89d5c3080789b898a29d3da337f3f8d640bb224b81fc21e777c5ccabd1c3547d58fd027399abbeb155a1b88d5db1940b28da8adef1ea4597f8527b93b1b35cdc8ae2a8da33266e215984dee687d9c661e329db7bc8850e910b65a3175237adab03f48ec406341295c0b26f76981aebbefa458611f73fd6f195481fc661708b9b0d6c44f5eeee8be4d81abad466c085c03482ad968980a2892fdb583e051f04a9d3ef3a8aac3a6d15bc94cc5ef764821d2722fc4677f696aa5e7260d130f667b264f01d620a81ac89731c5"}, &(0x7f0000000280)=0xe3) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x6, 0x6}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000480)={r13, 0x81, 0x7, 0xda8f, 0x6, 0x7ff, 0x3, 0x2, {r14, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x2, 0x1, 0x50, 0x0, 0x4cc5}}, &(0x7f0000000540)=0xb0) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5}}, 0x10) socket$bt_cmtp(0x1f, 0x3, 0x5) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) restart_syscall() 20:35:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{0xffffffffffffffff}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:35:04 executing program 5: 20:35:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0xb}, 0x7f}}, 0x4, 0x1, 0x7, 0x5, 0xf8, 0x5, 0x20}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x74, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x1, @rand_addr="98421eb798c82b75af95f3393bdbf8fe"}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}, 0x3}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x3d}]}, &(0x7f00000002c0)=0x10) 20:35:05 executing program 5: [ 648.229984][T27834] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 648.248781][T27836] FAT-fs (loop2): bogus number of reserved sectors [ 648.255377][T27836] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 648.332416][ T27] audit: type=1804 audit(1584045305.171:703): pid=27836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/510/file0/bus" dev="sda1" ino=16865 res=1 20:35:05 executing program 5: 20:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 648.428605][T27856] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = semget(0x1, 0x3, 0x2) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000400000000000004000000000000000300000000000000010000000000000006000000", @ANYRES32, @ANYBLOB="94a09c40f16e75c177f26c29c938b29ab820d49d191b631aea8d7666676db746e2f879cd8947165d9c0ffb2948b4a03acf7faf9c8bd378d50f1ec94174a22a7a282398542131246b21af9a3cf3c5c0f77e6622447c812c0bc7f98cb155c43395d478ef5e1a1d44cdb82f86351f30478c30bf7c18fc98b193d000094f", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fffeffff03000000000000000100000000000000010100000000000008000000050000002f5d766d6e657431030000000000000000000000000000003f000000000000001f00000000000000080000005600000002000000000000000400000000000000080000000000000005000000000000000500000000000000003b000000000000080000000180ffff0400000003000000feffffff", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="070000007f000000000000000300000000000000010001000000000012000000070000002e2f6367726f"], 0x371) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000002c0)=0xe8) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) statx(r6, &(0x7f0000000300)='./file0\x00', 0x6000, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000800)={{0x1, r3, r4, r5, r7, 0x84, 0xdb67}, 0x637, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3f}) truncate(&(0x7f0000000080)='./file0\x00', 0x1) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r15, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x0) r16 = accept4(0xffffffffffffffff, &(0x7f00000006c0)=@tipc=@name, &(0x7f0000000740)=0x80, 0x800) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r16, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f00000007c0)=0x10) sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r11, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x801) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r17, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r18 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2801, 0x0) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r19, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r20, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000100)={0x6, 0x7, 0x7, 0x0, 0x0, [{{r17}, 0x2}, {{r0}, 0x9}, {{r18}, 0xffffffffffffffc1}, {{r19}}, {{r0}, 0xae2c}, {{r0}, 0x1f}, {{r20}, 0x4ee8}]}) [ 648.566648][T27866] FAT-fs (loop2): bogus number of reserved sectors [ 648.573998][T27866] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:05 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x4080, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x5c, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x1a, 0x1, '/:keyringbdev$selinux\x00'}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '{nodev\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4000004) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000003c0)={0x7, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000300)=[0x9, 0x2, 0x9, 0x143, 0x800, 0x200, 0x3], 0x7, 0x0, r5}) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 648.663598][ T27] audit: type=1804 audit(1584045305.501:704): pid=27866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/511/file0/bus" dev="sda1" ino=16865 res=1 [ 648.668211][T27868] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) ioctl$SIOCRSACCEPT(r8, 0x89e3) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r9, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000002c0)={0xfffffff, 0xe3, 0x5, r5, 0x0, &(0x7f00000001c0)={0xa2095b, 0x5, [], @string=&(0x7f0000000180)=0x20}}) ioctl$RTC_EPOCH_SET(r10, 0x4008700e, 0x80000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r11, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) 20:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:05 executing program 5: 20:35:05 executing program 5: 20:35:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:05 executing program 5: [ 648.981826][T27895] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 649.003183][T27897] FAT-fs (loop2): bogus number of reserved sectors [ 649.010099][T27897] FAT-fs (loop2): Can't find a valid FAT filesystem [ 649.121296][ T27] audit: type=1804 audit(1584045305.961:705): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/512/file0/bus" dev="sda1" ino=16760 res=1 20:35:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:06 executing program 5: [ 649.196471][T27903] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0xffffffffffffff8f, 0x40280) r2 = accept4$nfc_llcp(r1, &(0x7f0000000440), &(0x7f0000000300)=0x60, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000004c0)='/dev/input/event#\x00', 0xc30, 0x242100) dup2(r2, r3) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0x1, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2) r4 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0xff, 0x10100) getdents64(r4, &(0x7f0000000140)=""/62, 0x3e) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000380)={0x59, "afc1aa3ad9e7003e51c67f38a677ce5062bf52db0ae41fa4de21c28dcab6dc38a2e4e248cc6c018affdfba22d1aa5df5da164c22956a2df95f6263b088ddaa51cd5890acf62768a27060589a8ccbc5b993c3cbc0836414f6bde63905fdd3c87fbb2f7aee9d6d46c27f5fc7ef13d81845707d23376ed0d534b01e68adb2f4cb30"}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0x10000}, {0xa, 0x0, 0x0, @initdev}, r5}}, 0x48) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x94, 0x2, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8000}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa17d}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x200}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, {0x9, 0xf9}}, 0xa) connect$pppoe(r3, &(0x7f0000000340)={0x18, 0x0, {0x0, @link_local, 'veth0_to_hsr\x00'}}, 0x1e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) set_tid_address(&(0x7f0000000180)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x1, r0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000002c0)=0x2c) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000380)={0xe, {0xa, 0x7f, 0x9, 0x9d, "b963eda37ded146bb629a5661b495fc40dfe045af7be6d31279e500cb4e3add8f09f60505a02cdb78474f0feea21f023856255f1ee6bf193284ffa1166c18ca41e47c6aaafaa3fc51f0e26da15f8e3bec10cc987e808d2975fe879f67931fe525cecdc3b6649ca188f44fd6d29c0244b1fb42535f40e335e923b31a80aa898f8de8d3d5ffb59aa88e9b14d42a5b56b30004d57f1552f07ceae07b75c22"}}, 0xa9) 20:35:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:06 executing program 5: [ 649.432578][T27920] FAT-fs (loop2): bogus number of reserved sectors [ 649.439233][T27920] FAT-fs (loop2): Can't find a valid FAT filesystem [ 649.452729][T27922] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:06 executing program 1: prctl$PR_GET_DUMPABLE(0x3) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000080)={0x1, 0x600, 0x3f, 0x7fff, 0x8, 0x9, 0x1ff}) [ 649.510958][ T27] audit: type=1804 audit(1584045306.351:706): pid=27920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/513/file0/bus" dev="sda1" ino=16760 res=1 [ 649.588511][T27929] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) 20:35:06 executing program 5: 20:35:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 649.856242][T27954] FAT-fs (loop2): bogus number of reserved sectors [ 649.863708][T27954] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 649.953984][ T27] audit: type=1804 audit(1584045306.791:707): pid=27954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/514/file0/bus" dev="sda1" ino=16993 res=1 20:35:06 executing program 5: 20:35:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x19}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf5b}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}, @NFULA_CFG_CMD={0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x9a2}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x5}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4c850) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) sendmmsg(r3, &(0x7f0000003040), 0x4000000000003c4, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:07 executing program 5: 20:35:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) r5 = dup(r0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)}, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r7}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 20:35:07 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) 20:35:07 executing program 5: [ 650.532025][T27985] FAT-fs (loop2): bogus number of reserved sectors [ 650.538655][T27985] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 650.630171][ T27] audit: type=1804 audit(1584045307.471:708): pid=27985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/515/file0/bus" dev="sda1" ino=16759 res=1 20:35:07 executing program 5: 20:35:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:07 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) 20:35:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 651.077742][T28026] FAT-fs (loop2): bogus number of reserved sectors [ 651.084430][T28026] FAT-fs (loop2): Can't find a valid FAT filesystem [ 651.172648][ T27] audit: type=1804 audit(1584045308.011:709): pid=28026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/516/file0/bus" dev="sda1" ino=16768 res=1 20:35:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:35:08 executing program 5: 20:35:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$assume_authority(0x10, r2) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000090, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d756e69782c6163636573733d757365722c63616368653d667363616368652c667363616368652c6e6f657874656e642c64656275673d3078303030303030303030303030303038312c7f00616d653d2f6465762f696e66696e6962616e642f72646d615f636d002c11e3bf9d657569643d", @ANYRESDEC, @ANYBLOB=',appraise,\x00']) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) 20:35:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty, 0x4}, {0xa, 0x0, 0xfffffffd, @initdev}, r5, 0x2000}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:08 executing program 5: [ 651.867248][T28053] FAT-fs (loop2): bogus number of reserved sectors [ 651.873834][T28053] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:08 executing program 5: 20:35:08 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioprio_get$pid(0x1, r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) [ 651.960133][ T27] audit: type=1804 audit(1584045308.801:710): pid=28053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/517/file0/bus" dev="sda1" ino=16913 res=1 20:35:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:35:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:09 executing program 5: [ 652.283506][T28089] FAT-fs (loop2): bogus number of reserved sectors [ 652.290135][T28089] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:09 executing program 5: 20:35:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x12, 0x0, [0x8001, 0xcf94, 0x4, 0x7ff, 0x8, 0xb10e7ff5, 0x1, 0x6, 0x6, 0x0, 0x40, 0x7, 0x401, 0x7fffffff, 0x3f, 0x8000]}, {0x8, 0x0, [0x6611, 0x9, 0x80000001, 0x7, 0x9, 0x3, 0x4, 0x2, 0xfffffffe, 0x9, 0xe10, 0x3, 0x1000, 0x4, 0x9138, 0x1ff]}, {0x1, 0x0, [0x7, 0x5, 0x8, 0x3, 0x1, 0x81, 0x5, 0x291b, 0x1, 0xffff1521, 0x1, 0x5, 0x2, 0x27, 0x0, 0x3]}, {0x28, 0x0, [0x2, 0xcd57, 0x5, 0x9, 0xc7, 0x4, 0x83c3, 0x400, 0x177, 0x2, 0x311b, 0x40, 0x3, 0x0, 0x9]}], r2, 0x1, 0x1, 0x120}}, 0x20) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ptrace$setsig(0x4203, 0x0, 0x506, &(0x7f0000000400)={0x37, 0xfffffffd, 0x1}) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000380)={{0xffffffffffffffff, 0x3, 0xfffffff8, 0x9e5d3ea427213a50, 0xfffffffa}, 0x65, 0x4, 0x100}) 20:35:09 executing program 5: [ 652.695843][T28111] xt_check_match: 9 callbacks suppressed [ 652.695859][T28111] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:09 executing program 5: [ 652.795120][T28127] FAT-fs (loop2): bogus number of reserved sectors [ 652.801776][T28127] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000001c0), &(0x7f00000002c0)=0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000300)={0x14, "08511cb0261539038500be78e381254902f9e3a55b7546211e973a13f1a5684a", 0x2, 0x773, 0x2, 0x601700, 0x4000806, 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x7]}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) socket(0x2c, 0x1, 0x9) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_RESERVED(r5, 0x5601, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x129402, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) [ 652.881732][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 652.881745][ T27] audit: type=1804 audit(1584045309.721:712): pid=28127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/519/file0/bus" dev="sda1" ino=16849 res=1 20:35:09 executing program 5: [ 652.972228][T28131] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 653.242138][ T27] audit: type=1804 audit(1584045310.081:713): pid=28122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir549436467/syzkaller.auANfP/499/file0" dev="sda1" ino=16758 res=1 [ 653.266229][T28146] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev, 0xfffffffd}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:10 executing program 5: 20:35:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) 20:35:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) lseek(r3, 0x893, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 653.695124][T28162] FAT-fs (loop2): bogus number of reserved sectors [ 653.701786][T28162] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 653.783820][ T27] audit: type=1804 audit(1584045310.621:714): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/520/file0/bus" dev="sda1" ino=16913 res=1 20:35:10 executing program 5: 20:35:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:10 executing program 5: [ 654.064740][T28187] FAT-fs (loop2): bogus number of reserved sectors [ 654.071795][T28187] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 654.175474][ T27] audit: type=1804 audit(1584045311.011:715): pid=28187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/521/file0/bus" dev="sda1" ino=16778 res=1 20:35:11 executing program 5: 20:35:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)={0x4, 0xa, 0x4, 0xe000, 0x9, {r3, r4/1000+10000}, {0x3, 0x4, 0x4e, 0x3, 0x2, 0x20, "95e2bad2"}, 0x8, 0x3, @userptr=0x9, 0x9, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000380)=""/156) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44091}, 0x40094) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r7 = getegid() r8 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000400000000000004000000000000000300000000000000010000000000000006000000", @ANYRES32, @ANYBLOB="94a09c40f16e75c177f26c29c938b29ab820d49d191b631aea8d7666676db746e2f879cd8947165d9c0ffb2948b4a03acf7faf9c8bd378d50f1ec94174a22a7a282398542131246b21af9a3cf3c5c0f77e6622447c812c0bc7f98cb155c43395d478ef5e1a1d44cdb82f86351f30478c30bf7c18fc98b193d000094f", @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fffeffff03000000000000000100000000000000010100000000000008000000050000002f5d766d6e657431030000000000000000000000000000003f000000000000001f00000000000000080000005600000002000000000000000400000000000000080000000000000005000000000000000500000000000000003b000000000000080000000180ffff0400000003000000feffffff", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="070000007f000000000000000300000000000000010001000000000012000000070000002e2f6367726f"], 0x371) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000400000000000004000000000000000300000000000000010000000000000006000000", @ANYRES32, @ANYBLOB="94a09c40f16e75c177f26c29c938b29ab820d49d191b631aea8d7666676db746e2f879cd8947165d9c0ffb2948b4a03acf7faf9c8bd378d50f1ec94174a22a7a282398542131246b21af9a3cf3c5c0f77e6622447c812c0bc7f98cb155c43395d478ef5e1a1d44cdb82f86351f30478c30bf7c18fc98b193d000094f", @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fffeffff03000000000000000100000000000000010100000000000008000000050000002f5d766d6e657431030000000000000000000000000000003f000000000000001f00000000000000080000005600000002000000000000000400000000000000080000000000000005000000000000000500000000000000003b000000000000080000000180ffff0400000003000000feffffff", @ANYBLOB="06000000ffffff77000000000300000001000080ffffffff0e000008090000002f64657562695f6374726c00000005000000000000000300000000000000000000006a00000000010000000000000900000085ff6e12010000000000000000000000007dcfff070000000000000000080000000000000700000000000000030000000000000040000000060000510339236bcfe08ad7b6eb06386ae17cf3d07ffef1d106a85ca5fd7d72ad7114e41b7cf58437ff00000069ff62709eede9d3006ed5b63cbaf0a665fb943724f4edffb32569bd65ce0a16c232984dbef548c8ff98b1560037384bbc4ef4c8d21eb282a7bd6c8ca6fc105bb44b2eeaa20bff7f0be17f57f4d65d96cc59c88400000000000000000074a3be13865496f7231ab187bb07ca09fa8aac9488ee3b691c4ceef5ac4ad7dbc2a5f7f4ac91dd5501549ae3a3e173feb1de0395ed536d2e9b858a3293228b45ca248e672cf93bcfd7e49a0a861e76f79cd9ec4706effd882ae5fbd7aafef40d53c1bb2d1727274e2ac32b8d83f42be19c263258938d12748dedc5d2a33bc51b9e37285c8307802e8f58b6a9593c109ac75a80b54783de03c3f0ca714cb5ed848adf22c214c71f181e0071ed5fcc171c233acdc1645e2a7a3e4e5c9d1ea04c60ce1a135dcd89d3f2b6f1beb07b131207265429aec9da613696e1ddbb72aea5", @ANYRES32, @ANYRES32, @ANYBLOB="070000007f000000000000000300000000000000010001000000000012000000070000002e2f6367726f"], 0x371) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r14, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0) fstat(r11, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000400000000000004000000000000000300000000000000010000000000000006000000", @ANYRES32, @ANYBLOB="94a09c40f16e75c177f26c29c938b29ab820d49d191b631aea8d7666676db746e2f879cd8947165d9c0ffb2948b4a03acf7faf9c8bd378d50f1ec94174a22a7a282398542131246b21af9a3cf3c5c0f77e6622447c812c0bc7f98cb155c43395d478ef5e1a1d44cdb82f86351f30478c30bf7c18fc98b193d000094f", @ANYRES32=r17, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fffeffff03000000000000000100000000000000010100000000000008000000050000002f5d766d6e657431030000000000000000000000000000003f000000000000001f00000000000000080000005600000002000000000000000400000000000000080000000000000005000000000000000500000000000000003b000000000000080000000180ffff0400000003000000feffffff", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="070000007f000000000000000300000000000000010001000000000012000000070000002e2f6367726f"], 0x371) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x9, &(0x7f00000006c0)=[r7, r8, r9, r10, r15, r16, r17, 0xee01, r18]) fchdir(r6) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000080)) 20:35:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, 0x0, 0x0) 20:35:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, 0x0, 0x0) 20:35:11 executing program 5: [ 654.675268][T28216] FAT-fs (loop2): bogus number of reserved sectors [ 654.681941][T28216] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:11 executing program 5: [ 654.743257][ T27] audit: type=1804 audit(1584045311.581:716): pid=28216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/522/file0/bus" dev="sda1" ino=16762 res=1 20:35:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2000, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x8000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:35:11 executing program 5: 20:35:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, 0x0, 0x0) 20:35:11 executing program 5: [ 655.067265][T28238] FAT-fs (loop2): bogus number of reserved sectors [ 655.073860][T28238] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000400000000000004000000000000000300000000000000010000000000000006000000", @ANYRES32, @ANYBLOB="94a09c40f16e75c177f26c29c938b29ab820d49d191b631aea8d7666676db746e2f879cd8947165d9c0ffb2948b4a03acf7faf9c8bd378d50f1ec94174a22a7a282398542131246b21af9a3cf3c5c0f77e6622447c812c0bc7f98cb155c43395d478ef5e1a1d44cdb82f86351f30478c30bf7c18fc98b193d000094f", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fffeffff03000000000000000100000000000000010100000000000008000000050000002f5d766d6e657431030000000000000000000000000000003f000000000000001f00000000000000080000005600000002000000000000000400000000000000080000000000000005000000000000000500000000000000003b000000000000080000000180ffff0400000003000000feffffff", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="070000007f000000000000000300000000000000010001000000000012000000070000002e2f6367726f"], 0x371) r2 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000400000000000004000000000000000300000000000000010000000000000006000000", @ANYRES32, @ANYBLOB="94a09c40f16e75c177f26c29c938b29ab820d49d191b631aea8d7666676db746e2f879cd8947165d9c0ffb2948b4a03acf7faf9c8bd378d50f1ec94174a22a7a282398542131246b21af9a3cf3c5c0f77e6622447c812c0bc7f98cb155c43395d478ef5e1a1d44cdb82f86351f30478c30bf7c18fc98b193d000094f", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fffeffff03000000000000000100000000000000010100000000000008000000050000002f5d766d6e657431030000000000000000000000000000003f000000000000001f00000000000000080000005600000002000000000000000400000000000000080000000000000005000000000000000500000000000000003b000000000000080000000180ffff0400000003000000feffffff", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="070000007f000000000000000300000000000000010001000000000012000000070000002e2f6367726f"], 0x371) r3 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000400000000000004000000000000000300000000000000010000000000000006000000", @ANYRES32, @ANYBLOB="94a09c40f16e75c177f26c29c938b29ab820d49d191b631aea8d7666676db746e2f879cd8947165d9c0ffb2948b4a03acf7faf9c8bd378d50f1ec94174a22a7a282398542131246b21af9a3cf3c5c0f77e6622447c812c0bc7f98cb155c43395d478ef5e1a1d44cdb82f86351f30478c30bf7c18fc98b193d000094f", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fffeffff03000000000000000100000000000000010100000000000008000000050000002f5d766d6e657431030000000000000000000000000000003f000000000000001f00000000000000080000005600000002000000000000000400000000000000080000000000000005000000000000000500000000000000003b000000000000080000000180ffff0400000003000000feffffff", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="070000007f000000000000000300000000000000010001000000000012000000070000002e2f6367726f"], 0x371) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x410400, 0x0) r4 = getegid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000400000000000004000000000000000300000000000000010000000000000006000000", @ANYRES32, @ANYBLOB="94a09c40f16e75c177f26c29c938b29ab820d49d191b631aea8d7666676db746e2f879cd8947165d9c0ffb2948b4a03acf7faf9c8bd378d50f1ec94174a22a7a282398542131246b21af9a3cf3c5c0f77e6622447c812c0bc7f98cb155c43395d478ef5e1a1d44cdb82f86351f30478c30bf7c18fc98b193d000094f", @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fffeffff03000000000000000100000000000000010100000000000008000000050000002f5d766d6e657431030000000000000000000000000000003f000000000000001f00000000000000080000005600000002000000000000000400000000000000080000000000000005000000000000000500000000000000003b000000000000080000000180ffff0400000003000000feffffff", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="070000007f000000000000000300000000000000010001000000000012000000070000002e2f6367726f"], 0x371) getgroups(0x7, &(0x7f0000000580)=[0x0, 0xee00, r1, 0xee01, r2, r3, r4]) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x1fe, 0x4, &(0x7f0000000500)=[{&(0x7f0000000280), 0x0, 0x2}, {&(0x7f00000002c0)="59be3aea9c2916b7aee0b7b1c5a5c02e89f50c2cb31f62cb905df8625f4d2a2b3581206973412881cfc1cd41418d434be1d482113e5cfc28801db6f3c0e1763fcd05dbb60275b2cea2f36f9a4a0996373920ecdd502f4fb35a498c7d41ba2d1592d55da2ab", 0x65, 0x120000}, {&(0x7f0000000380)="fa19dc15856267fae2456916da1b98336606f815ae792400550f43c51f231150889043b178b80e60aa26ff0535121f4a2000108ce31c20f7820f55b8f594592162b99889cdf14d768d9e102705ae48536a35cf552fa9356e2cede3c29eef0a5fa9f5bcafd2b94267c8d7ce2ad78dbcc3d7819b3a30f87a3901613251b5d2d89cd9a3802e451a199d8a3146df002ad15408fb7d91829a8a74b0bde4f6232a9c9ae04ea18c87763d87e8e6e87fc3ba62fd4c24eee277a5e83752e2ac4efb084848484fdfcbed5a1e2c8380e41b95ee1366d9f54f93f871cd5d8e569311350b8abc91f0a7b4f633", 0xe6, 0x6}, {&(0x7f0000000480)="d08ffe47b191889322e6548a1bf445ef5e8a2d036b411c6193a9d82e8346cf813e65fdfc9a7ccc8140f75d9c95fba64d0febabf9686b573963a5684d4bbf6ebd6908e2678feeb1ed38a0e31fb070a7e4f58e686c9ccf07f54bbcf47434659aacc85ea8da4a285b2348ba50900b", 0x6d, 0xe0}], 0x10, &(0x7f00000005c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@gid={'gid', 0x3d, r5}}], [{@fsname={'fsname'}}, {@obj_type={'obj_type', 0x3d, '/dev/vcsa#\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+\'(}'}}, {@pcr={'pcr', 0x3d, 0x24}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/infiniband/rdma_cm\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/infiniband/rdma_cm\x00'}}]}) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r7 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfff, 0x0) getsockopt$packet_int(r7, 0x107, 0x13, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="e83658903b9f5bf838c85b1242e186d7"}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x24}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 655.153220][ T27] audit: type=1804 audit(1584045311.991:717): pid=28238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/523/file0/bus" dev="sda1" ino=16782 res=1 20:35:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) [ 655.300204][T28259] FAT-fs (loop3): Unrecognized mount option "fsname=" or missing value 20:35:12 executing program 5: 20:35:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000340)=0x401) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000002c0)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r6 = accept4(r3, &(0x7f0000000140)=@ethernet={0x0, @broadcast}, &(0x7f0000000080)=0x80, 0x0) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f00000001c0), 0x2) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 20:35:12 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002600)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002640)={0x28, r7, 0x1, 0x0, 0x0, {0x6}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x88}}, 0x40001) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x301000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1) 20:35:12 executing program 5: 20:35:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) [ 655.525514][T28270] FAT-fs (loop2): bogus number of reserved sectors [ 655.532160][T28270] FAT-fs (loop2): Can't find a valid FAT filesystem [ 655.626174][ T27] audit: type=1804 audit(1584045312.461:718): pid=28278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/524/file0/bus" dev="sda1" ino=16779 res=1 20:35:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) 20:35:12 executing program 5: 20:35:12 executing program 5: 20:35:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 655.935679][T28254] FAT-fs (loop3): Unrecognized mount option "fsname=" or missing value 20:35:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x4b, 0x2}, 0x7) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x0, @initdev}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r5}}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r7}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r7}}, 0x10) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000280)={0x6, &(0x7f0000000200)=[{0x7, 0x4, 0x5, 0x10001}, {0x4, 0x3f, 0x3f, 0x1}, {0x9, 0x4, 0x8, 0x1}, {0x91a7, 0x4, 0xff, 0xfff}, {0x3, 0x2, 0x5, 0x7fff}, {0x8, 0x0, 0x5, 0xffff0001}]}) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x101603, 0x0) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/btrfs-control\x00', 0x0, 0x0) accept4$netrom(r10, &(0x7f0000000900)={{0x3, @bcast}, [@netrom, @null, @bcast, @default, @null, @rose, @bcast, @bcast]}, &(0x7f0000000980)=0x48, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r11}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r11}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x3, @initdev, 0xffffffff}, r11, 0x2000}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(r9, 0x125d, &(0x7f00000002c0)=0x4) 20:35:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r4}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7, @mcast1, 0xfff}, {0xa, 0x4e21, 0x2, @mcast1, 0x3}, r4, 0xff}}, 0x48) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x200000) ioctl$TUNSETLINK(r5, 0x400454cd, 0x4) ioctl$TIOCSIG(r5, 0x40045436, 0xc) 20:35:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) [ 656.126809][T28303] FAT-fs (loop2): bogus number of reserved sectors [ 656.133464][T28303] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:13 executing program 5: [ 656.230841][ T27] audit: type=1804 audit(1584045313.071:719): pid=28309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/525/file0/bus" dev="sda1" ino=16773 res=1 20:35:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="230000002e00ff041dfffd", 0xb}, {&(0x7f00000002c0)="d5c77294583d8a5b02a8f587f0dae5db4c40ec5ff3561803add3695e5ed0b7f834ead77f9dda9f9634098867d88640e88a2a9a60a6f649fa0737b10d860c77d83562d0d97214b23426b7afda6fd10c84168e1f60c112b88063f4476f695d92d3999826a08ccbdc5d317800d55f4d1b6e3e5cb341ef3438a5f15e626fc1d5e4953005be0127ea649b26475d1c0e4fd376b261207fb2b6fb2a0bad200c34e675cbdaa2bb8b9e6eae34f64924d290fa4b8ef4d6a870c2a6369d973d856fb3650a31b661dea04bdbe504dae5618ce1a0d12605e30edee54576800978f4e459ece0e6dbb998ef06b643f3dfe54fd447b74ee3d10268b342", 0xf5}, {&(0x7f00000003c0)="8edc2fff9111236f0910f0b49ae11dd528f2023b321366d9af115454d425f10c683e566b2f378847d4498b76ec1961f30119ec6c07fc", 0x36}, {&(0x7f0000000400)="ef8eb9eff683294dce5ea232c404b27338975eefac6b57a5bc967a6c400d5ad006d15ddd5ac1126a9ffbc0d3ab", 0x2d}, {&(0x7f0000000440)="8fb39c02ee727bea89e4492df5ccaf207d0004c85561d1c5973894846677c5ff2d387b771081535a4fb2d811dcc4bb033770b758672b4785f55a64505bcd9a5b800169d5ec2aec268ffbe3d30156526b47cee41ffea3f451dbc97ac1492b57e0b5a9bd9c0fe2664a2cee6c310c99c8628b12b672181f2a68c5109ca8106ced3d7eeab1dd686cf7596b", 0x89}], 0x5}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$selinux_attr(r5, &(0x7f0000000180)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$cgroup_int(r5, &(0x7f0000001580)='cpuset.cpus\x00', 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000580)=""/4096, &(0x7f00000001c0)=0x1000) 20:35:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) 20:35:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:13 executing program 5: 20:35:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47, 0x2}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) [ 656.725041][T28321] Unknown ioctl 4701 [ 656.727808][T28335] FAT-fs (loop2): bogus number of reserved sectors [ 656.735501][T28335] FAT-fs (loop2): Can't find a valid FAT filesystem [ 656.803862][ T27] audit: type=1804 audit(1584045313.641:720): pid=28335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/526/file0/bus" dev="sda1" ino=17409 res=1 20:35:13 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x200000, 0xa808) 20:35:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x208, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) [ 657.261058][T28364] FAT-fs (loop2): invalid media value (0x00) [ 657.267244][T28364] FAT-fs (loop2): Can't find a valid FAT filesystem [ 657.321244][ T27] audit: type=1804 audit(1584045314.161:721): pid=28364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/527/file0/bus" dev="sda1" ino=16732 res=1 [ 657.557946][T28325] Unknown ioctl 4701 20:35:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000f40)='/dev/btrfs-control\x00', 0x22183, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000010c0)={@isdn={0x22, 0x20, 0x81, 0x6, 0xae}, {&(0x7f0000000f80)=""/198, 0xc6}, &(0x7f0000001080), 0x20}, 0xa0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:14 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:35:14 executing program 5: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={[{@resize_size={'resize'}}, {@nointegrity='nointegrity'}]}) 20:35:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x208, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) 20:35:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141240, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) ioctl$TIOCCONS(r3, 0x541d) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5000, @dev={0xfe, 0x80, [], 0x42}, 0x7}, {0xa, 0x4e22, 0x5, @local, 0xddb9}, r4, 0x8}}, 0x48) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0xfd}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xfff, @local, 0x1000}, {0xa, 0x4e24, 0x3, @ipv4={[], [], @remote}, 0x8}, r7, 0x4}}, 0x48) 20:35:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x208, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) [ 657.701808][T28387] FAT-fs (loop2): invalid media value (0x00) [ 657.707939][T28387] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x0, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:14 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x80000005) 20:35:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x0, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 658.105323][T28421] FAT-fs (loop2): invalid media value (0x00) [ 658.111467][T28421] FAT-fs (loop2): Can't find a valid FAT filesystem 20:35:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r4, r5) keyctl$link(0x8, 0x0, r5) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 658.186518][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 658.186533][ T27] audit: type=1804 audit(1584045315.021:724): pid=28421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/529/file0/bus" dev="sda1" ino=16786 res=1 20:35:15 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2100, 0x0) bind$x25(r2, &(0x7f0000000140)={0x9, @null=' \x00'}, 0x12) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x0, @initdev}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r6}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r7, 0x1c, 0x0, @in={0x2, 0x4e22, @local}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x0, 0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) accept4$llc(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffd1d, 0x80800) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) [ 658.606187][T28447] FAT-fs (loop2): invalid media value (0x00) [ 658.612319][T28447] FAT-fs (loop2): Can't find a valid FAT filesystem [ 658.682899][ T27] audit: type=1804 audit(1584045315.521:725): pid=28447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/530/file0/bus" dev="sda1" ino=16797 res=1 [ 658.722680][T28425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:35:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) recvmmsg(r6, &(0x7f0000001180)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000440)=""/231, 0xe7}, {&(0x7f0000000540)=""/191, 0xbf}], 0x4, &(0x7f0000000600)=""/79, 0x4f}, 0x1}, {{&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)=""/171, 0xab}, {&(0x7f00000007c0)=""/190, 0xbe}], 0x2, &(0x7f00000008c0)=""/159, 0x9f}, 0x1}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)}], 0x1, &(0x7f0000000a80)=""/118, 0x76}, 0x101}, {{&(0x7f0000000b00)=@ax25={{}, [@null, @remote, @netrom, @null, @netrom, @netrom, @remote, @default]}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)=""/45, 0x2d}], 0x1, &(0x7f0000000c00)=""/5, 0x5}, 0x668}, {{&(0x7f0000000c40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000cc0)=""/124, 0x7c}, {&(0x7f0000000d40)=""/73, 0x49}, {&(0x7f0000000dc0)=""/133, 0x85}, {&(0x7f0000000e80)=""/157, 0x9d}], 0x4, &(0x7f0000000f80)=""/110, 0x6e}}, {{&(0x7f0000001000)=@generic, 0x80, &(0x7f0000001140)=[{&(0x7f0000001080)=""/187, 0xbb}], 0x1}, 0x1ff}], 0x6, 0x20, &(0x7f0000001300)={0x0, 0x1c9c380}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ocfs2_control\x00', 0x1, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044050}, 0x4008000) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 658.813325][T28425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 658.830024][T28425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:35:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 658.958745][T28425] device bridge_slave_0 left promiscuous mode [ 658.977184][T28425] bridge0: port 1(bridge_slave_0) entered disabled state 20:35:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x111, 0xb}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5, 0x3, 0xe}, {0x8}}}]}}]}, 0x58}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000018c0)=0x0, &(0x7f0000001900)=0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001d40)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000001e40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003080)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000003180)=0xe8) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r14, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) r15 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r15, r15, &(0x7f0000000000), 0x8080fffffffe) recvmsg$can_raw(r15, &(0x7f00000037c0)={&(0x7f0000003280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003300)=""/170, 0xaa}, {&(0x7f00000033c0)=""/3, 0x3}, {&(0x7f0000003400)=""/79, 0x4f}, {&(0x7f0000003480)=""/89, 0x59}, {&(0x7f0000003500)=""/135, 0x87}, {&(0x7f00000035c0)=""/111, 0x6f}, {&(0x7f0000003640)=""/42, 0x2a}, {&(0x7f0000003680)=""/29, 0x1d}], 0x8, &(0x7f0000003740)=""/117, 0x75}, 0x40) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003880)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000003980)=0xe8) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r18, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r18, 0x8933, &(0x7f0000004c80)={'batadv0\x00', 0x0}) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r24, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r21, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r24, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r24, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) r25 = socket$nl_generic(0x10, 0x3, 0x10) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r26, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r28 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r25, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r28, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r27}]}, 0x1c}}, 0x0) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = socket$nl_route(0x10, 0x3, 0x0) r31 = socket$netlink(0x10, 0x3, 0x0) r32 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r32, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r32, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r31, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r33, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20100100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r30, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r33, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r33, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r25, 0x8933, &(0x7f0000004cc0)={'team0\x00', r33}) r35 = socket$nl_route(0x10, 0x3, 0x0) r36 = socket$nl_route(0x10, 0x3, 0x0) r37 = socket$netlink(0x10, 0x3, 0x0) r38 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r38, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r38, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r37, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r39, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r36, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r39, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r35, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r39, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) r40 = socket$nl_route(0x10, 0x3, 0x0) r41 = socket$nl_route(0x10, 0x3, 0x0) r42 = socket$netlink(0x10, 0x3, 0x0) r43 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r43, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r43, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r42, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r44, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r41, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r44, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r40, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r44, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000005140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005180)=0x14) r46 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r46, r46, &(0x7f0000000000), 0x8080fffffffe) getsockname$packet(r46, &(0x7f00000051c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005200)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000005240)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000005a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000059c0)={&(0x7f0000005280)={0x710, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x815}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7da}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xb93}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x432}}}]}}, {{0x8, 0x1, r34}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r39}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x7, 0x0, 0x3f, 0x1}, {0x400, 0x1d, 0x9}, {0x101, 0x0, 0x7f, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x53}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xf686}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r44}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r45}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r47}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r48}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}]}, 0x710}, 0x1, 0x0, 0x0, 0x8040}, 0x4044000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x2, 0x3}}, 0x20) [ 659.032616][T28478] FAT-fs (loop2): invalid media value (0x00) [ 659.038810][T28478] FAT-fs (loop2): Can't find a valid FAT filesystem [ 659.093466][ T27] audit: type=1804 audit(1584045315.931:726): pid=28478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/531/file0/bus" dev="sda1" ino=16796 res=1 [ 659.128345][T28425] device bridge_slave_1 left promiscuous mode [ 659.136285][T28425] bridge0: port 2(bridge_slave_1) entered disabled state 20:35:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 659.250736][T28425] bond0: (slave bond_slave_0): Releasing backup interface [ 659.269925][T28492] FAT-fs (loop2): invalid media value (0x00) [ 659.276010][T28492] FAT-fs (loop2): Can't find a valid FAT filesystem [ 659.336603][ T27] audit: type=1804 audit(1584045316.171:727): pid=28492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/532/file0/bus" dev="sda1" ino=16804 res=1 20:35:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 659.513516][T28425] bond0: (slave bond_slave_1): Releasing backup interface [ 659.534868][T28508] FAT-fs (loop2): invalid media value (0x00) [ 659.542083][T28508] FAT-fs (loop2): Can't find a valid FAT filesystem [ 659.605244][ T27] audit: type=1804 audit(1584045316.441:728): pid=28508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/533/file0/bus" dev="sda1" ino=16804 res=1 [ 659.887769][T28425] team0: Port device team_slave_0 removed [ 660.039000][T28425] team0: Port device team_slave_1 removed [ 660.127757][T28425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.135235][T28425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.188544][T28425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.196214][T28425] batman_adv: batadv0: Removing interface: batadv_slave_1 20:35:17 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x80000005) 20:35:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 660.326261][T28482] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 660.335501][T28482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 660.343400][T28482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 660.447478][T28521] FAT-fs (loop2): invalid media value (0x00) [ 660.453538][T28521] FAT-fs (loop2): Can't find a valid FAT filesystem [ 660.456870][T28524] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 660.594006][ T27] audit: type=1804 audit(1584045317.431:729): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/534/file0/bus" dev="sda1" ino=16791 res=1 20:35:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 20:35:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r8 = fcntl$dupfd(r4, 0x0, r2) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:35:17 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) signalfd(r0, &(0x7f0000000080)={[0x1fd0]}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x10, &(0x7f0000000140)={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e24, 0x800, @remote, 0x2}}, 0x7, 0xef59, 0x2, 0x7f, 0xcf8}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x5, 0x8, 0xc598, 0x46f6, r5}, 0x10) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x414180, 0x0) fstat(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() mount$9p_virtio(&(0x7f00000003c0)='syz\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20008, &(0x7f0000000500)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@access_any='access=any'}, {@uname={'uname', 0x3d, '/dev/infiniband/rdma_cm\x00'}}], [{@smackfsroot={'smackfsroot', 0x3d, '/selinux/checkreqprot\x00'}}, {@hash='hash'}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@hash='hash'}, {@obj_user={'obj_user', 0x3d, '/selinux/checkreqprot\x00'}}, {@obj_type={'obj_type', 0x3d, 'GPLeth1selfvmnet1mime_typevboxnet1-[/vboxnet0)'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_eq={'uid', 0x3d, r8}}, {@appraise='appraise'}]}}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, [], @raw_data=[0x8, 0x548, 0x5, 0x1000, 0x5f, 0x613a, 0x10001, 0x101, 0x4, 0x84, 0xffb5, 0x631, 0x2, 0x8f, 0x0, 0x3ff, 0x4, 0x8, 0x3f, 0x8001, 0x23, 0x98, 0x5, 0x3, 0x7fff, 0xfffffff7, 0x3, 0xf8, 0x8, 0x6, 0x0, 0x5]}) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)=0x1) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1, 0xffffffff}}, 0x10) 20:35:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x404b, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x0, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "f9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x47}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 660.828025][T28540] sctp: [Deprecated]: syz-executor.1 (pid 28540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 660.828025][T28540] Use struct sctp_sack_info instead [ 660.846650][T28539] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 660.932890][T28549] FAT-fs (loop2): invalid media value (0x00) [ 660.939103][T28549] FAT-fs (loop2): Can't find a valid FAT filesystem [ 660.985011][ T27] audit: type=1804 audit(1584045317.821:730): pid=28549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/535/file0/bus" dev="sda1" ino=16789 res=1 20:35:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000001840)={0x6, 0x62ab}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) sendmsg$inet_sctp(r4, &(0x7f00000017c0)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x0, @rand_addr="e92c01d0ad575b60d0168225d73425ba", 0x7ff}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000140)="ef37a5037951754aeae6d19a7426d87a79a9c5c9bfa01e1e18a7bfaac445eda07970dd6a1955e9751ad9971a2d994f4fc21743866a181e12b9490e2a8fdab7a190a338d64366743d18a053e496c403ea41fc0fa9a8253e79ae3e2a7e5ba0dc43a46e855d2a78bca8faae70ffc6b098db55c90eef64ac80babd325411ee3693282d10a948b71b5ece31e70a6a67c4a7f61fe9781c6451a7b757", 0x99}, {&(0x7f00000002c0)="968ba437c65f4757c26f2844ffd210195cd9fdb460cbc70aea778e8806fae663e48924ff41d75d7f4c70f49632040bad180f5e18ff19f4bbbb82f222120bd7965b8329a55c42353e6487a67b3c282536ef24eeda1167af2021cb958ddaa4dc84fc3deddd4931f86e258686d54ca6a8a432df4987fe39587cba4f660467581210764460e43bd0887e104e1006c03d9ac11d5aefd626c98e9b05bfd14ebc8781bdc848c122a1b5c98fc8735f55948c7a8eaed6a9570c6432d21b3443032a186326cc7dcda919f3c3bd52d95b9e1e4e4de5ee", 0xd1}, {&(0x7f00000003c0)="69239bca71957009b9d224127a401cf0d653e0901b388cddb0df45481b0ff0d1b6e4dfc127c2af2df0e9541090a86fc7bf39932b8f9c183a1c27417548ed8b91bc53876cccb7d8a557b671fe585f8b09a9ef8eaba624f3a54e9d280f6dfb7f6cd4d8df7949b1322d96ecf11193585233828fa631f7cc8fe4324b1b732c030804c5219400c2f95233cd94f280180ec6db78284e6f9d1458622cc0607a7ebaab3336fcb38e45a65a7577cee3752db340af2fda1ca2ff8e2ec1075a9994de1148b7e0ec3f9deac7bedde20a77c04d5e4290c75b4f928532c1a2fc14e2e28ddecae6fad6da", 0xe3}, {&(0x7f00000004c0)="2c8df51733bb254870998fb168ac23907f2ee9fbb3d74ca5f84653debc835e70f87446ddf8122adc8edc54478db4205a0b8be251ed52acca90de0819d94ba83a4b4627bf0ad522d3b18175efba22289b00c8ce43ceebd59492b1c3cfe33c51ce16c77946a69d1524302fff41b1b2e58960d253c7b638aff13be1d3b7dff35827deb1d8a3af17450024ad", 0x8a}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="ecb34bca1c709e4d8255c09cb564eaad2d490a508857d9ed40526be9b35a7f78a0611b042ad81c7f83", 0x29}, {&(0x7f0000001600)="3dd2a1b774d56b35d8f9253c892ad038526697d39923df29ba05855d33", 0x1d}, {&(0x7f0000001640)}, {&(0x7f0000001680)="a10cdb11b6cd0d1807b53e0f5ae764f02e66180c7cd89ca545b3516bbddee83f2c435404585f10766599e2", 0x2b}], 0x9, &(0x7f0000001780)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0x40, 0x20000045}, 0x20004004) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000001640), &(0x7f0000001800)=0x30) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 661.086151][T28540] sctp: [Deprecated]: syz-executor.1 (pid 28540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 661.086151][T28540] Use struct sctp_sack_info instead [ 661.106346][T28554] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 20:35:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:18 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x80000005) 20:35:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) [ 661.389707][T28531] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 661.398546][ T27] audit: type=1804 audit(1584045318.241:731): pid=28566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/536/bus" dev="sda1" ino=16800 res=1 [ 661.514471][T28531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 661.557550][T28531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:35:18 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x80000005) 20:35:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:18 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) socket$packet(0x11, 0x2, 0x300) 20:35:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000140)={@local}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x2000, 0x0) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r13, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffed}, {0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', r13}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) ioctl$KVM_RUN(r14, 0xae80, 0x0) [ 661.919772][ T27] audit: type=1804 audit(1584045318.761:732): pid=28593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/537/bus" dev="sda1" ino=16800 res=1 20:35:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 662.183883][T28569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 662.280495][T28569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 662.299032][ T27] audit: type=1804 audit(1584045319.141:733): pid=28608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/538/bus" dev="sda1" ino=16811 res=1 [ 662.301710][T28569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:35:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ftruncate(r0, 0x800) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) [ 662.465662][T28569] device bridge_slave_0 left promiscuous mode [ 662.500104][T28569] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.581331][T28569] device bridge_slave_1 left promiscuous mode [ 662.605384][T28569] bridge0: port 2(bridge_slave_1) entered disabled state 20:35:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ftruncate(r0, 0x800) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) [ 662.723164][T28569] bond0: (slave bond_slave_0): Releasing backup interface 20:35:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ftruncate(r0, 0x800) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8400fffffffa) [ 663.072455][T28569] bond0: (slave bond_slave_1): Releasing backup interface [ 663.294052][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 663.294067][ T27] audit: type=1804 audit(1584045320.131:736): pid=28634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/541/bus" dev="sda1" ino=16815 res=1 20:35:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 663.656366][T28640] attempt to access beyond end of device [ 663.662286][T28640] loop2: rw=2049, want=78, limit=63 [ 663.667573][T28640] buffer_io_error: 44 callbacks suppressed [ 663.667585][T28640] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 663.681914][T28640] attempt to access beyond end of device [ 663.687608][T28640] loop2: rw=2049, want=79, limit=63 [ 663.692822][T28640] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 663.701360][T28640] attempt to access beyond end of device [ 663.707004][T28640] loop2: rw=2049, want=80, limit=63 [ 663.712290][T28640] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 663.721065][T28640] attempt to access beyond end of device [ 663.726710][T28640] loop2: rw=2049, want=81, limit=63 [ 663.732017][T28640] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 663.740568][T28640] attempt to access beyond end of device [ 663.746214][T28640] loop2: rw=2049, want=130, limit=63 [ 663.750249][T28569] team0: Port device team_slave_0 removed [ 663.751552][T28640] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 663.751596][T28640] attempt to access beyond end of device [ 663.771647][T28640] loop2: rw=2049, want=131, limit=63 [ 663.776948][T28640] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 663.785565][T28640] attempt to access beyond end of device [ 663.791277][T28640] loop2: rw=2049, want=132, limit=63 [ 663.796571][T28640] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 663.805196][T28640] attempt to access beyond end of device [ 663.810954][T28640] loop2: rw=2049, want=133, limit=63 [ 663.816256][T28640] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 663.824860][T28640] attempt to access beyond end of device [ 663.830538][T28640] loop2: rw=2049, want=142, limit=63 [ 663.835834][T28640] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 663.844455][T28640] attempt to access beyond end of device [ 663.850203][T28640] loop2: rw=2049, want=143, limit=63 [ 663.855514][T28640] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 663.864143][T28640] attempt to access beyond end of device [ 663.869813][T28640] loop2: rw=2049, want=144, limit=63 [ 663.875145][T28640] attempt to access beyond end of device [ 663.880871][T28640] loop2: rw=2049, want=145, limit=63 [ 663.886390][T28640] attempt to access beyond end of device [ 663.892098][T28640] loop2: rw=2049, want=257, limit=63 [ 663.900598][ T27] audit: type=1804 audit(1584045320.741:737): pid=28643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/542/file0/bus" dev="loop2" ino=78 res=1 20:35:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 664.251349][T28647] attempt to access beyond end of device [ 664.257041][T28647] loop2: rw=2049, want=78, limit=63 [ 664.262364][T28647] attempt to access beyond end of device [ 664.268079][T28647] loop2: rw=2049, want=79, limit=63 [ 664.273330][T28647] attempt to access beyond end of device [ 664.279305][T28647] loop2: rw=2049, want=80, limit=63 [ 664.284552][T28647] attempt to access beyond end of device [ 664.290285][T28647] loop2: rw=2049, want=81, limit=63 [ 664.295553][T28647] attempt to access beyond end of device [ 664.301334][T28647] loop2: rw=2049, want=130, limit=63 [ 664.306661][T28647] attempt to access beyond end of device [ 664.312370][T28647] loop2: rw=2049, want=131, limit=63 [ 664.317738][T28647] attempt to access beyond end of device [ 664.323371][T28647] loop2: rw=2049, want=132, limit=63 [ 664.328774][T28647] attempt to access beyond end of device [ 664.334412][T28647] loop2: rw=2049, want=133, limit=63 [ 664.339795][T28647] attempt to access beyond end of device [ 664.345425][T28647] loop2: rw=2049, want=142, limit=63 [ 664.350813][T28647] attempt to access beyond end of device [ 664.356446][T28647] loop2: rw=2049, want=143, limit=63 [ 664.361804][T28647] attempt to access beyond end of device [ 664.367500][T28647] loop2: rw=2049, want=144, limit=63 [ 664.373166][T28647] attempt to access beyond end of device [ 664.378869][T28647] loop2: rw=2049, want=145, limit=63 [ 664.384390][T28647] attempt to access beyond end of device [ 664.390101][T28647] loop2: rw=2049, want=257, limit=63 [ 664.397830][ T27] audit: type=1804 audit(1584045321.241:738): pid=28649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/543/file0/bus" dev="loop2" ino=79 res=1 [ 664.471473][T28569] team0: Port device team_slave_1 removed [ 664.547745][T28569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.582991][T28569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.677968][T28569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.696642][T28569] batman_adv: batadv0: Removing interface: batadv_slave_1 20:35:21 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x80000005) 20:35:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(0x0, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 664.809852][T28594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 664.860186][T28594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 664.893972][T28594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 664.920177][T28655] attempt to access beyond end of device [ 664.925849][T28655] loop2: rw=2049, want=78, limit=63 [ 664.931190][T28655] attempt to access beyond end of device [ 664.936830][T28655] loop2: rw=2049, want=79, limit=63 [ 664.942198][T28655] attempt to access beyond end of device [ 664.947910][T28655] loop2: rw=2049, want=80, limit=63 [ 664.953144][T28655] attempt to access beyond end of device [ 664.958858][T28655] loop2: rw=2049, want=81, limit=63 [ 664.964141][T28655] attempt to access beyond end of device [ 664.969836][T28655] loop2: rw=2049, want=130, limit=63 [ 664.975180][T28655] attempt to access beyond end of device [ 664.980907][T28655] loop2: rw=2049, want=131, limit=63 [ 664.986224][T28655] attempt to access beyond end of device [ 664.992695][T28655] loop2: rw=2049, want=132, limit=63 [ 664.998097][T28655] attempt to access beyond end of device [ 665.003734][T28655] loop2: rw=2049, want=133, limit=63 [ 665.009145][T28655] attempt to access beyond end of device [ 665.014788][T28655] loop2: rw=2049, want=142, limit=63 [ 665.020202][T28655] attempt to access beyond end of device [ 665.025843][T28655] loop2: rw=2049, want=143, limit=63 [ 665.031816][T28655] attempt to access beyond end of device [ 665.037526][T28655] loop2: rw=2049, want=144, limit=63 [ 665.042863][T28655] attempt to access beyond end of device [ 665.048702][T28655] loop2: rw=2049, want=145, limit=63 [ 665.054200][T28655] attempt to access beyond end of device [ 665.059925][T28655] loop2: rw=2049, want=257, limit=63 20:35:21 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x80000005) 20:35:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffd48, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x8}, 0x16, 0x2) [ 665.069903][ T27] audit: type=1804 audit(1584045321.911:739): pid=28655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/544/file0/bus" dev="loop2" ino=80 res=1 20:35:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8008000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) close(r2) truncate(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000140)="fbcb8babb33279483fedaf4c1ef719a37ade169e384c6ecedfcde8fcc16e8a6e853c84449ef918b6ec94a86c7b217edfe0a995336134", 0x1a}, {&(0x7f00000002c0)="bf8e39d9da3a165255d5fd79a720bbe394ea06068f83e9c30b92e4fa67c205257818b244ff4da2cb39c12060af23a19fe7e27cbb7f4d5870aab15cb00113e6b24b1223f2c6eeca1ed520a7589816d6a7113733b81cdfbdd6eb74b11b874e938082ce1cd7e30e1693b49366927caff52e20e83c7c064cf94e9e1e5972d8c60893141503fa3e27d143061a0f8db8036707ef90aa8899bbeddb48c7199aa7d3fbe83c619334813161af76f4a497533cccd8310ea323413ede4a2dad45f583cb86", 0xc5}, {&(0x7f0000000180)="34fe753c748bc2288e70340a6590ed90340d1399beb6cfc0e6875afbb81f13d856ee77563c48af75dc8c080152b4ff816655f4fd251da1aa", 0x38}, {&(0x7f00000003c0)="f0e6c65f5ef5ff9eb9a2eac574c9cfba017d7283f0fc8f466bec1572766e02e002daa0a35d2fa910bac3181eb54c818a6fc80a43292b639b92832bea5edb2b5429ec70e28384007f9503a9acd7987ae7319089b0adf5cb901e5eb9feb90c260c763e9b5b170512a211173a9c95d85a868afe27eb4f08c7459d16f80ef150e760783d1d1cab2a4fabdf23d775b25ee38d9a9b0ddaa1f0aeb555c853e6aa4e375a1317dda32d06a5ccda69995bf08941ab3737fe19c29433708c1c", 0xba}, {&(0x7f0000000480)="38076d7665cc9e53956b6bcbb07a167f773bd814c6cc486e82f506176e9177514c3f28ce14cf1c3df788e169d1587d2d1b6b1431cdcc75eabd726fdcb83b519a6c8c57a132e27cfb703f916f042f3c05120fc6fdae48e6f877c255f0f1069e515983edd6b4b46e4e7ba74325d9bbf4405edd871c861e3e9c75e696a577f67a52e0d720a9e91317a17249bbbc6eec7bedd1dfcba87d9134cae744d9e2bce66e6c65d153c16ca7dc0582f344373e199c92a313316333cd07d1e50ca125fadb462e79d2c2498f249f04024cc6923fe131d011b1979cdebc048da70a2a2d7b482063ba948ead82bf25b313a07c449371bccbf58f8dad046320339fbca2827bd18ea8a521680e2372cbdd1b81040dfdde057788471e002bf93330cf446199ec98b69285c33526b2e526ba4648fd992c8494728f73106bd42edea9f6fbf06a028c455876e284aed8a1c85d6beed41e53ade0e8eea8592fd241859f3daf1ddc9db2743289dd9638049a811bf6edfec97cb42f2cc28d8d5266a145a35b8f4102dba97bdbc7b9d9403c99f6af8bed3dd2ed266c56dee9d9725de8947df66746e1d90f97b8c58ccfb26edcef2ac986fe7bcc815a383c20d3d134f097d895c95f314cb0900b9584150b03d62a377af5c6643d189092b004428b53d24eca679ddf49be2a400dfb66da830cc03f888e26a02ed6281fb8dda1c51f36326c1b7fa3bfdbfd912ac9f10206cc485f7a254541cdbabd186666032cab67350ec2d3a4611f1a050ccf555f01843b1dd62383dcaf67380f9ef79a1f1f5f420154d5d4709c115180d6d2cccda28aee0f02358475d16489c6f2168704ae1a82c79b35fbcef70b0a07f35219f05b1fbffc71941b0ba87acd56b331ec6e61f15d044c080311fd046d5bf4067b6cea5ba22282df3d2b3df8125a58d79746dbeba70cb183b422facaf60e3ec1d8e3368a0c55d9e405bc88d74b101615aac88c897dfa54d567ed1f77ef826bd3b4bb29f68886a23f1380d9ee39ec41f0efe91da19c2a4273a01d119b3d5bb86b716ad0ad2b9f6b74c113225a4d36391712ecc70e5715418a27cd67085c154494858a316332c61238ef0fc3dbfdf49924cedd236539994f316031e767c7950346df39c5763b8bd412c51f6af45ffc37dce106f69d62f82264ca8e07dce3802f02b22eadcde1012707e975ede0a4c23da2c85c5a508f513035d4401754e05a559bbca96cbc3df59278517dd20508e80c6adb600e5c4ab82fa1645f6c4266660c45b7b0a388a4422b074f4b0e9731f2f06695ef7c5630d0002bd6381ca8fb9fa0b14d79cb89c448d50fefa2f6191da3ef27af813c655d4ddb7922b4da6474fd85489e875fc48d187c70cc54ece9f3a4b1989641497c5d2acb459aa3c1dbc9e2681cb8a9c35ddd3621f2fe8e5ae48864c80f4a5a43430b1433e96b285a04335ccef2dd9ebc797c34056c54adcbe3d5de707dd0a55e0297225eebcdb86ef527ae85a5ba52f22f6810c486ac56f84ca5e02696f7e37b51c90ed99f7a63feb4b3893d44d848e17aaa2237aaf2f12e35b20ba0e8df54f4cd03136e43868c34c8dd36ed0694ca622698efcc567b160ed211f8c0bc9ee855d3f14cb8661db39ded0a15b862cadce54a7a20dcb27e13c7a451055da765d710e58af818ff77ec5d601808c4bc3338796a66330684a1a79da56fedb528b5fc934e515f7ed1dde7ae002110f609180ba0fb61cee2f684cb2fa7bb272f71b60079bcc9da217f81ca595944e7aa2d04809deb9edf090871d89bd33522b9ff6394946a6a8ebad514f95851f3c725a1f280e55099e5f839a6f300a514497178ba69283a74d10a6c597324bb6541b22438fa9ce6883a61726ba6a6a7e1699f758fd7f38f59aa8365a4bdf136a75d4b9800c891a6f034829bb39cbd4cebeca14f319f56388febad5f785afa8a4bf79f257310b72693164c5d524a6832bd775bbbe3b7309cc0e8202c88627ed667153ea0f5645e905fc65f7d8687a8fcea42f19a69c07a47429c85a74085f0ab2581070fd513a4f2e7b200017465cc022255aa8d198d8909bc9668dbc5b9fb7d00c48971d122b8d144e4d8d04fb0ecb7e82e7bd16a2767ebb490704656f00d950ec86de7225a891dfff4e171cb90628a4b354e401c81d7cebc9e0be0408d819672d5d407792f1e58b33f9da9780b1375f4e2eed4222fe5439d755e1aed805874a3999210ff1a2eb652f041d6c1455d186017d948658276f9105380fc152c816f8a4a86581f5234d0c57b9d81f3ffa1799a706d95f2440c9cba241deec30da0f0a8b9df7feeed19d36d9458020d433dd069bb7470cbd1134f49f2021916c13f90e0431d150ed6e698ad856fcc8280ae23b68eab368471b6289e3866d9e0853c5b862887c9e24a3a246a7a4777996fbba2b6c56ae664c9e0a80656f5868ea82da9380f5b3e587bb421f889ede3f1d48b0d75c180285a26f6aa1efd4bf584ec9ef7cca09045ae4f71e10c9143ee5a1e955f9a6b6fd2be3240131617f3595d29f07a9310f1817896ec3e01c223ac87dd33f08428fe8a030d7e6fb831117b91260b3486ebeb07dfc32b4712806be2e61c28139bd30b491079d6f7907470c2a01a9fa1000b44ddc9036e15d91a5cf2d5b000b791444ae9ecb3bc9f5f7f51b17b4b509540bf115f16d894a582b35dc3e1c4b3b53a1a319ae916288da47701b17532fea3111bdfad6b68b89b89aa646ec0bc6921f980b8acec0265404330ea138a74b756810226abfe1518a75c21d419769ed127482877b8693883ca1018dabfd193f9069a56ebddf71bf074bf52b448d1f6dbea2194cb3ff68818740a18b575466faaf222b461768cb9b655707d7ad17c2ce8883abd3bf9052896b47d913884744bc9bae1a17b44e5632428c6161868be292b12cf3d9e0a0f019fa8d56a9de865835b34b40d99cfacbcdfc3549002602b7eddf46202bc552e47aedfd882c7c2d3f4b236db09ba2da39996d5ec72e53c5203a5ebd64e4b605fa0d12ab4e5fa9d805647728d654cc4190a0c6fdefc29c9bc8ec144772f94348ffc1b321ae0ce4b433a38564ecc2a31b418cd7a7ee64dc2f7d34a5fbaeb63452fe162c8ef09a6799a422bf46c7fd8d8fe21d32abbe0b2de132bed51c6ee9718f00ab1d3cb790f9726178f7ae027a766a6820bf05f681ae7020f6363c20ec7b7ae0b6a3966c26bca091086bb2d3ea9d915dc21c5fa7ae538f6f4936181ceeae5e743e1558ed6565b56b9876fb0c1871d44404d012fc509d1f32fee7f804b88df0ec60c2a7ebb9da611ebd364222b7cf686c3239731c24e8fbcf191d0f53535f3f6a266fdc09f85864cc976aa95f3476ba59f29bb701c7122e168534da24adb7960e4adacede0cb4265437d39fcc8cfc4f74bded3ecd792827bb346cb9a8bef50d19879c4a1f077baf0c8c34830633674f8ba432db286c3b4686c4dd42a59163aaa8a0f5deeefa9eedd96744a6afec92d499df73ce34cfb7c2a9af9bd38b769c48cbac032a90d922d2a63c12d11d84eadf184b03386293df15cdaccc99412c2917cce10b067601a901901b2757ea2bc322066a6f4e4ca302c867332803ce6ea96db7a1d65f6e48e6facad4a1463a779e8fbffea3d7662f0cdfa28e0d0972879f155c70a5e190984db65ed3588d66c2880fbfe3acb7d32046e9decd6f4f8ed6a737f9f382eb0e73894fe67e4b38457abc2adadf8d77a3b7002b23552b067d0ed4d943b54a74ca9a0e56daa2335ef1d8fc1dd840c74c306488a6b91554d769ad3dfc696f3b43d8ac0f806d6e7fbd9345b9c0cb15bce55a350a339cebc264aecb964bba79a1cb07a4996a91ba229dde586b9d44160fccfd42bfbf183824b99b55f28cd1bc8ab21dee97bd2720d8723857b82ce982a9f2fd2d64fbceba8385da50dddaa0cb7ca145574812b94311a96be4376a949498e96b522116364606c60e2e8ec14822f96fd8b44ca6eb2679eff14bee8b7afa5d945a8c3a19b9aff1102fbc06af3add2b5b785fa17e489a2c1f73f8e207361b769c633f187eac850f8979d24d78b6538a08de8fc0e7f24a80433a1c68050a16532a8961f2e8892c865816e3d92068e0286aed197c7bb3aa40371efed318de13d836c567b93145b2aa38077fc9d87e9af8b2f60ac59763ff57779f3915aa2ea2e25768b197de997a6dd310f28513f73ae1c6dda299c6caf78511a91585e04e4620b38219c2afefc684474b95ee69d82ee4edc9b16913f6fbc7e1468795673aceeb582b461652f193da81213d54d1b485dcb8fa68dc7178034d89c93190598ed3a6a51d70added79695b74acf9ed01b9a7387d3fa400a7d8afca6b2910318a0bbf13e3f9076f656870a05569d94aa378e14fe6d8d6ed055cc710ea50a9b1efa3e059dff57656f1b05237d3bad00bee83111fcae0c30a889d3dcf9a53cf443e32591c6bbd158381b1a4e4eb1d38a2fb6d065b173605ccdcd3a62c0cfb573892f0cc78e89e9f91f09b0a3b2cebe043f8983f568df031e0814ae30110a9f8f89cc2b42cbd33ce4a454c34ed64e36610fadb18de0cae2018e4cd4b2b35dcd2d5fe374b2957dddddcd1bf60e02107deec9a598bafb5d80709d522325762037a3b6baaf6b1542425822394bc3319e84840ed66602c3f42ac673b171517dc6dafe2fe7616b26fdf49c795d4a77ec556f8d5ac3309eae49a6eb3f890a24640fb66ce2e62b5770ca93b96832a234880cb51dd4c52b6e0f1cc75d9e173ef9325d1eba7e3ce171021bc2793d9ad9525b6f72e53bea66df5ae5476a2eb22cbe9f5163079553812a8d5edf1276ee90a9eb2823fe3c76ec957a7b0888435e950a3f9aa06ef51a0464b04dad7a066dce4a827cc654ae564a684fee3b5831a925d027bbb0b53a5b002068a7e771ba9d1427b9e3481845dd5624215ba424e6eed51678f2b64b7b1600dc1752cdda9aaad32cd99726fd86301bdf9fbefa5981776c3d1cf0f386ccdd7dcf705306c1b6500c5b2cf5fa102251b352611017d9bc1180c3627aa43ea2a1b8bd7b759c095ffe2f5462704beef55ac92838d987cb6760d25c1101db4fcb90e3f420c80c46db060d517009fe204501db09112233b7a053fa838b1fa22c48a3b0738945332a5f31f1c02a7fa1e07f0419aa7b7af843f130d8631b9cffcc741f810bfcdb831631b547e3f95ef043132fd7090e77aed99ff1eb475c7c2b3c9ee8681ac51ae20eeeca589a50dd2f4aa6833ef2d24dbc7dcfd2eeccef9d07d54eec6bd85797539a7346dc930bc4bc6fad7b6d0cce74e8900b8e6a1ddce6e79bfb7b7f1ce002b3dc3ff12d23c85c7ce5f24b8bc24f77af8ba7c51d93ec8f1ab01c9307aa6989a80953421b2efbdaf5331050d2e6ae83610ee664801d65cc8573dc4d948f25ae04bc3e8f606711a8dbb3ec543fa9886d871a4634a0d2a23f9dabd26a0d5ea616b754e76d7ee47c9ef094f5645bdf41b138a998fe2b8371a7bdb4dae47ce04b638a55f0fc272c221f93a102beb67477b41ba6dbc0837f87057dc1c7d07f4098701761913bb8c4b87b1a4a9fa4ae3f5593b6b2af4be9bbf3afcbd3393e8747d3a231070c42366354118a0001ca4677379c6880162dc39ae77f97ad878804411ea4b6ea08a9253a3c627243cfb5bbc6bdaf01724c9ff57bf47edc41c32ea5fa6b9d975f8e9c285545f0e51402e800f997f89af73ac4fb6cbe68cb71f006b04c0fecf1b5f9661f9000b2e3c91666fb478894e1d9b2891242daac903f8e20814b8e85f52b9bfa8c49f0add4cb513271c5ead9c2eb9b1395d969c7e456d9e", 0x1000}, {&(0x7f0000001480)="c463811c529517a79d93d23ebfe49ad1d907048cc539a9bd57025cd727323dc324882fef9955958796bb7d0069e36de00534d467781bf8996c65e4652bb7c31fa03bd6ba50b14f5efd2f4632c9108b82a203b8ed27397c9c693cae5eb7398df0761da91b8bc9d59b5e1d000e50437a", 0x6f}], 0x6}, 0x4c084) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) syz_mount_image$nfs4(&(0x7f0000000040)='nfs4\x00', &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffb, 0x5, &(0x7f0000001880)=[{&(0x7f0000001580)="046b96ef137993eb55d4cbd82b8c7934b8ee5b1114e138657875495119527068b6e8369a4a0fdd0452949d8cb34ff708aacd93e54f4513032542d2d3dbbe40", 0x3f, 0x4}, {&(0x7f00000015c0)="c22dd93248f1455f79a5cd854a4f43b5de1f59ed8dd5834e25b34815c722c136c93d49541ef4e3eed513856ad8d5e8ffbc6aed3db40b7c031a41546bb0417dae00d910c45ab1c61321860133579c28be7c1c636c7cd02e7517d5ce2a54429cc266ebdbe48e106e1e79705860ef075a7f0076bb0ae735519a07701d178b1dad40440e1a9f537c96737fbc27ca337f610476388ca4ca8f5c436e1bbb29e296616058ce0d329629bb6657ca20", 0xab}, {&(0x7f0000001680)="5505392d3c423107b36e609032d42f13621c08a24c75c23d0067a7019a5bee8335d8d7827fcbd9d0d7cadbe84fc87b6df322ca0747012f089648bbcf0f43be9c48b32d789fa544e5c0611845", 0x4c, 0x807}, {&(0x7f0000001700)="a2f2209f4a6ea60181161194da8c60ac32456c11f5ff17989a517ae1685b7a3e9dd862d9a95bfa41386f8f7e0e9514ab6446a1c809dc940a3704decd74d9d4fe656c5c46bf3a0eb7016767501cd50e6abe4552b91d9f0e2efa4a959ce5", 0x5d, 0x7}, {&(0x7f0000001780)="af726c6d74b985e2d019f800ec2207a3332c617901314b7878d5739e06f4eb95a93f9c923a10a90a3ae3b35be48bacf114a216178abe90f49704c6e03e82ae9b38f9889f9ad3f77be33bfb9b0c463d6e27b338c676c719657609eda81051a60abeaabccd787befd8abb4a175d19112e76d9ffdce62ecdf78ec169849b04ef0c6d064f5d5bfe31847a8abdda740fa3372209953a2541e645db670f187bfbe58fa2719b732364007e88eca498e9da75db68f5ee739edd6ebdc6d0619d9e1eb34c7220ae04ffd13c6c33382aeeba753c19974f46ad8458b042d0bc1e40cb40f1435ae5822a80e5d47b0a14f9715a6f177264fcbe5d1e5db", 0xf6, 0x6}], 0x1000042, &(0x7f0000001900)='batadv0\x00') getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, 0xfb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$rds(r5, &(0x7f0000001940)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 20:35:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:22 executing program 1: alarm(0xd73) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x20041081) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r4) [ 665.585927][ T27] audit: type=1804 audit(1584045322.421:740): pid=28687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/545/file0/bus" dev="loop2" ino=81 res=1 [ 665.616654][T28684] nfs4: Unknown parameter 'batadv0' 20:35:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @rand_addr="d966b0600ca200bf5188986b13b01d58"}, r1, 0x1000}}, 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x200, 0x280000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000005c0)={0x7, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000600)={r5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)={r5}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) [ 665.638766][T28660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:35:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x1, 0xb, 0x4, 0x1000000, 0x0, {0x0, 0x2710}, {0x2, 0xc, 0x80, 0x2, 0x4e, 0x1, "762b9835"}, 0x3, 0x1, @offset=0x9, 0x101, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000140)=""/29) pipe(&(0x7f0000000080)) [ 665.808674][T28660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 665.852053][T28660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.030260][T28678] nfs4: Unknown parameter 'batadv0' [ 666.037622][ T27] audit: type=1804 audit(1584045322.881:741): pid=28711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/546/file0/bus" dev="loop2" ino=82 res=1 20:35:23 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x80000005) 20:35:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x3, 0xb, 0x4, 0x10000, 0x8, {}, {0x3, 0x0, 0x3f, 0x4, 0x20, 0x2, "f43d9b7c"}, 0x7fdb, 0x2, @userptr=0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 666.204753][T28671] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 666.241578][T28671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.312985][T28671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:35:23 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x80000005) [ 666.399451][ T27] audit: type=1804 audit(1584045323.241:742): pid=28730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/547/file0/bus" dev="loop2" ino=83 res=1 20:35:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000300000008000300", @ANYRES32=r4, @ANYBLOB="077adb323d70da6342d650458e8ae163efbeae71dbb4eb0cca00596ed0179d9ea82dcfe42553a10d2639b9ab1f8723d3531a65eca526254bdad8bd1c78ed4fc49009d8c49662d02c91350695c4a270392328da39f6e55217708dad7a93942f82e420f5bbbb0a57f3a7ac390db7ca99f2dd24607b10de7e829614396b27181572b03fe7783c6cb869404dcf91e31d4b160328b1b27785aaecfbf8dc47b3c26166092e3e55b367abbce01a46abb76e4ce571c1f7e996aad176a905b603c99aec73830cea623750f5b399eb3f0edc9c34c5d9eb0f31db"], 0x1c}}, 0x0) lseek(r2, 0x8, 0x3) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) 20:35:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x7}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 667.023731][T28724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 667.082761][ T27] audit: type=1804 audit(1584045323.921:743): pid=28765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/548/file0/bus" dev="loop2" ino=84 res=1 [ 667.111730][T28724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 20:35:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 667.152708][T28724] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 667.238441][T28746] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:35:24 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 667.279604][T28746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 667.351175][T28746] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:35:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x8, 0x100) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r1, 0x2}}, 0x18) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f00000002c0)={r2, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) geteuid() accept4$x25(r5, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80800) accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) socket(0x6, 0x80000, 0xbf) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000000c0)={0x3, 'batadv_slave_1\x00', {0xffec}, 0x4011}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) [ 667.382182][ T27] audit: type=1804 audit(1584045324.221:744): pid=28776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/549/file0/bus" dev="loop2" ino=85 res=1 20:35:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0xfffffffffffffdd0, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0xfffe, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x6, 0x9b, 0x7, 0x3, 0x0, 0x100, 0x81340, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2c2, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x848, 0x4, 0x6, 0x7, 0x22ed, 0x5, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x311e03, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140)=0x8001, 0x4) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:35:24 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r3, 0x0, 0x80000005) 20:35:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="3100000012000900690006342fc56aef40c74408100000e446005c79cbb900540d03c000ec192dced88d5d5ae1673653b6", 0x31}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@flushpolicy={0x18, 0x12, 0x4e326d0846e0c13d, 0x0, 0x0, "", [@proto={0x5}]}, 0x18}, 0x8}, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) bind$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0x4ad, @fixed={[], 0x10}, 0x1}, 0xe) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r10, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendfile(r6, r7, &(0x7f0000000000), 0x8080fffffffe) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000100)={0x7ca6, 0x1, {0x2, 0x2, 0xffff7fff, 0x1, 0x40}, 0x7}) 20:35:24 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0xc) [ 667.972092][ T27] audit: type=1804 audit(1584045324.811:745): pid=28810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/550/file0/bus" dev="loop2" ino=86 res=1 20:35:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f00000002c0)="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") ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:35:25 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x4402, 0x38b) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000001c0)={0x9, 0x5, 0x2}) sendfile(r4, r5, 0x0, 0x8400fffffffa) creat(&(0x7f0000000080)='./bus\x00', 0xa) pipe(0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)={0x2, 0x3}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8947, &(0x7f0000000180)={'bond0\x00', @ifru_ivalue=0x10000}) flistxattr(0xffffffffffffffff, &(0x7f00000003c0)=""/188, 0xbc) socket$inet(0x2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r6 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000000)={0x0, 0x34565559, 0x0, @stepwise}) 20:35:25 executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="891891e1dd9962e123ce46668f56164730bd37ba9cf589971f5a4522fb21e87712a0b3a5e01a2557cae23cd896504d5c3a5b03bea635bb8a7a0889b1e5be1f8cc06a2b7f4d71b04febdf2a4e81d6bbdd9d896ebc0a3d5cdde0c22e97fa7dfe92cbeccc55d405ad3498b271f11812a4e27b66e00aaf01cb7aa4a6bccbad7089623836c78ceb2a7594a3b4", 0x8a) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x12, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {0x1a}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001740)={&(0x7f00000017c0)={0x48, r3, 0x502, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3f}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x2}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4042801}, 0x840) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendmsg$inet6(r9, &(0x7f0000001680)={&(0x7f00000001c0)={0xa, 0x4e21, 0x3, @empty, 0xfffffff9}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000000280)}, {&(0x7f0000001380)="6beed7b7e0534020fb39688447667d683af5cbad2ac4807abba5f19b9b5acfd3b6e4688fd706f0f71214f9e5afdb79f72501f7826024a169546b085b27379b085aa71b20bb0abb1fde16460658229285776b00a3f5cb4a40e7828ee106e7d0c8fbcbcf74d8e6a0d30248157cfd2d68bfaf8efbc88e2a06b36ed092a78973f3a3cd607a338b24e5741ddef8fd71f32810dbcffdd105d4f3587a750bbf0db6966f3b757298b383f98fba080890e487e7572064", 0xb2}, {&(0x7f00000002c0)="54a988b495e64e0d99424b03b496b96c0589abddf34051c425d5d82a39675aec897595cc9d9505e9a8f72eff2c0f46d7919af872287be530aa617ec0fd6413a372b4f7", 0x43}, {&(0x7f0000001440)="58b714980e037a2fa8a435849eb34c22adae230e78eddc760948eeb6e387332e9b1db3292f434e312cf78d2dc0fdc59ca25fadc9d14431caad76f1f6cd47a651e514755f88a46a7959cdbabdabe38c6c9986028fe1a23c5e5c03ec357c975004c2b4d4cb63d3d2056487e9023822cccf98a5162294d4d57c4fc5835a76f44fa6ded18947cc36af6e294e28e812822933e268a1c8212f0a48f87db62da201f754fcd31c07c4b0a433c43859c17e8d761f1c7913a3b1ce119f49bb16aab3739dceb2a4bd08", 0xc4}, {&(0x7f0000001540)="4d1ac3a78dc8c6952152adfc6029ca172d7f0e96e3a4eda837b8efec543beea1de28d7e8b897d61e249f2b84a82e7f11258c1f38b9b8deeb86f4409a972b0986c3748aef64b08150d714550c07ab1769393c7448b0c237ab033d3c7afea28d5413ff3aed239edac892ef1ae8114fec1e39399eedfa62aa4abe371e5f90ceb9ea214eecb3d6166d5af8a742ec57c431568fd9929b9d22c37bf88b033cb5fad079f43faf430c30b600d44b2831", 0xac}], 0x6}, 0x4040) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x1, 0x10400) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r11}}, 0x33) 20:35:25 executing program 3: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0xfff, 0x8, 0x4, 0x800, 0x5, {r0, r1/1000+10000}, {0x5, 0xc, 0x1, 0x5, 0xec, 0x40, "52111579"}, 0x645, 0x2, @userptr, 0x3f, 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r4}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000001c0)={0x5, 0x0, 0x4, 0x3f, 0x2ab}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 668.422596][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 668.422611][ T27] audit: type=1804 audit(1584045325.261:747): pid=28843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/551/file0/bus" dev="loop2" ino=87 res=1 20:35:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 668.663331][ T27] audit: type=1804 audit(1584045325.501:748): pid=28862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir196894626/syzkaller.39F0LA/583/bus" dev="sda1" ino=16594 res=1 [ 668.792752][ T27] audit: type=1804 audit(1584045325.581:749): pid=28864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir196894626/syzkaller.39F0LA/583/bus" dev="sda1" ino=16594 res=1 [ 668.794553][T28848] cgroup: fork rejected by pids controller in /syz0 20:35:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:35:25 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1}, 0x80) [ 668.913699][T28819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:35:25 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200000, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x88, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5a}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2df5551f}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xe1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe2}, @IPSET_ATTR_PROBES={0x5, 0x15, 0x35}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000380)={0x17, 0x14, &(0x7f0000000300)="adda1321ab5e1a6c53657ecc16a4640fa02eee4b"}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 669.008798][T28819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 669.054148][ T27] audit: type=1804 audit(1584045325.881:750): pid=28978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/552/file0/bus" dev="loop2" ino=88 res=1 [ 669.107458][T28819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:35:26 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r0, 0xff) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x1000) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000200)={0x8, 0x28d}) read$usbfs(0xffffffffffffffff, &(0x7f0000000540)=""/56, 0x38) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r3, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYRESHEX=0x0], 0x3}, 0x1, 0x0, 0x0, 0x28004895}, 0x4040001) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000000000000d40e29c155ec8a45", @ANYRES32=0x0, @ANYBLOB="bfcd062f7215bad8f6", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYBLOB, @ANYBLOB="8c97c5c099981091a4606b94e4dc539cf5c6baf6310f310b4490f6bf0e2863c3d8a84d4a28938be6680557af203a1275eca09c590444608fe85aa9bc87c3682ccf5fdc505fd12e17e141461a1114fd5667117c66806433e45731fc031a254fd4d816ac95c4c1cf0057c783934faf8bbf164f1adcc917e418a1b97714d2177d6f02916bac9c2dd81417791f0d6afbf5b7ada39730031a624837605fdfde8d5bcc877be3c0110b0c20189d9613f70b00000000000000"], 0x7, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='uppBrdir=./file0,lowr=.:file0,wore1\x00\x00\x00\x00']) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x10001) [ 669.508677][ T27] audit: type=1804 audit(1584045326.351:751): pid=29003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/553/file0/bus" dev="loop2" ino=89 res=1 20:35:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x20, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x90) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_RUN(r5, 0xae80, 0x0) 20:35:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "b76e0dd4e69e0641", "98f944a359f4f9d4cb14df04b3fa25fb", "23cd2b3f", "ce001e84933b4fcd"}, 0x28) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x3) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1044, 0xa, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_USERDATA={0x1004, 0xd, 0x1, 0x0, "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"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x35}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xaf}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, 0x1044}, 0x1, 0x0, 0x0, 0x1}, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x50, r1, 0xc73f5000) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x33) [ 669.838051][ T27] audit: type=1804 audit(1584045326.681:752): pid=29016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/554/file0/bus" dev="loop2" ino=90 res=1 20:35:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 669.962424][ T27] audit: type=1400 audit(1584045326.791:753): avc: denied { map } for pid=29026 comm="syz-executor.1" path="socket:[176393]" dev="sockfs" ino=176393 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 [ 670.019291][T29009] overlayfs: unrecognized mount option "uppBrdir=./file0" or missing value [ 670.022914][T28999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 670.085729][T28999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 670.104035][T28999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:35:27 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 670.308264][ T27] audit: type=1804 audit(1584045327.151:754): pid=29040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/555/file0/bus" dev="loop2" ino=91 res=1 20:35:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r0, 0xff) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x1000) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000200)={0x8, 0x28d}) read$usbfs(0xffffffffffffffff, &(0x7f0000000540)=""/56, 0x38) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r3, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYRESHEX=0x0], 0x3}, 0x1, 0x0, 0x0, 0x28004895}, 0x4040001) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000000000000d40e29c155ec8a45", @ANYRES32=0x0, @ANYBLOB="bfcd062f7215bad8f6", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYBLOB, @ANYBLOB="8c97c5c099981091a4606b94e4dc539cf5c6baf6310f310b4490f6bf0e2863c3d8a84d4a28938be6680557af203a1275eca09c590444608fe85aa9bc87c3682ccf5fdc505fd12e17e141461a1114fd5667117c66806433e45731fc031a254fd4d816ac95c4c1cf0057c783934faf8bbf164f1adcc917e418a1b97714d2177d6f02916bac9c2dd81417791f0d6afbf5b7ada39730031a624837605fdfde8d5bcc877be3c0110b0c20189d9613f70b00000000000000"], 0x7, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='uppBrdir=./file0,lowr=.:file0,wore1\x00\x00\x00\x00']) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x10001) 20:35:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x43cd80, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e21, @multicast1}}}, 0x108) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f00000002c0)={{0x3, 0x1, 0x5194da2c, 0x1, 0x7fff}, 0x9, 0xa1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000080)) 20:35:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x0, @initdev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:27 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106}}, 0x20) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0xffffffffffffff32, 0xfa00, {r1, 0x6d}}, 0x33) 20:35:27 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7, 0x8200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x3, 0x9, 0x5, 0x2, 0x0, 0x180000000000, 0x64930, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x20, 0x2, @perf_bp={&(0x7f00000001c0), 0xa}, 0x2000, 0x8001, 0x0, 0x5, 0x0, 0x7, 0x8}, r3, 0x8, r0, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xfffffffc, @empty}, {0xa, 0xfffc, 0x0, @initdev}, r4, 0xd74}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r10, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) sendmsg$xdp(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x2c, 0x1, r10, 0x19}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)="36568d4040dcc8299e2fc7bd3631ffa302aea2076c1c3592866fc7e87608f45c1e91b6b9f9f66acbe8ed6d6b722a9f168a276b4da1a62a56750a5cd83e05dac07fa5c0913a36ccf4ab3e68bf04bee6a23d04d9fa29acf945d80ae951e1d499553700ef578ec4bea66a86219ed279996485c491e2fec12a6ed3a5fb6f67c8ad2390adad567e7802e648c9f9fb9a", 0x8d}], 0x1, 0x0, 0x0, 0x20000014}, 0x4040) sendfile(r5, r5, &(0x7f0000000000), 0x8080fffffffe) write$P9_RWALK(r5, &(0x7f0000000140)={0x71, 0x6f, 0x2, {0x8, [{0x10, 0x2, 0x2}, {0x80, 0x1}, {0x10, 0x3, 0x3}, {0x4, 0x4, 0x6}, {0x10, 0x1, 0x8}, {0x20, 0x1, 0x8}, {0x80, 0x3, 0x1}, {0x0, 0x3, 0x1}]}}, 0x71) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000200)={{0x2, 0x0, @reserved="9065f1dfec14f2cdbd1830fe8e3fce69924258494240d3095a56023073cdd3b5"}}) [ 670.700122][T29044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 670.830982][ T27] audit: type=1804 audit(1584045327.671:755): pid=29068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir304586846/syzkaller.xfI3wU/715/file0" dev="sda1" ino=16829 res=1 [ 670.869667][T29044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 670.880941][T29044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 670.985239][ T27] audit: type=1804 audit(1584045327.791:756): pid=29074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/556/file0/bus" dev="loop2" ino=92 res=1 20:35:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) 20:35:28 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) syz_open_procfs(0x0, 0x0) 20:35:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x1008080fffffffe) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) 20:35:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r11, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="7510a58493ccd8d557d14737617f83a20693329c8607deee39ccf45e95af154e4eb15c8e193e0a66f9"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x1, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r12, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r13}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r13}, 0xc) 20:35:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) [ 671.674707][T29057] overlayfs: unrecognized mount option "uppBrdir=./file0" or missing value 20:35:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) 20:35:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) setsockopt$sock_int(r0, 0x1, 0x400000000000009, &(0x7f00000003c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), 0x4) 20:35:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x7b, 0x0, 0xff, 0xf8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000080003003324ebc8532d567a864236ba7f45aa717aa06a6d2c642b1292bc9adb3dc6bee06b800d67599c0d35d7f170f6a6fa261268c0233209ad86fe01bd16e29d029f9fe5d48dda9cbc579b5a2e5482f89d97", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000080)=0x7f) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:35:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x78a6, 0x8200) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000180)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000280)="7503bf8c826079a4ae338a4c4ab1f7d4f9c98af8f8fad24e26b8849532ca128423c0f3abf4e14ad58d261314f0ed040b6bea83a1ee4e42835eaedf1bca9a1c3fac73d5ddbe2f45b0d10c898558ca04ba756d46cb2d12d420f2dd8b7f55193883a762939ed03de936f6d2151f9242468bc236b2a55c7dbc09c1f8306b49e59721d1a3e5fa3a7027509842654640a84c19eab3e34a0b50e64bcecaf4c5ed0784bc2e6bff655b0dbe040fe9a2e38b91c923ead1407b1517", 0xb6, 0x9}, {0xfffffffffffffffd, 0x0, 0x2}, {&(0x7f0000000380)="ae954cd280e65304f1d5faf431956318da922d8431efcb6b680d1305ecebe7a4960f76780a2f6fe9828eb9a56e0fff42afa2e3e6b547e8623f621dc81c25dd71e8958d50d635a9b31a805fb20c", 0x4d, 0x2}, {&(0x7f0000000400)="6ae00830524253708d469145dae8cc4080f43621cde0b01c4126d74369103721226f27a4efa844bdf1aa41ac63edec9329c62f48c86cee00a4380799ef1626d7ea7f1d8b90dda370856b396deace2c84d518eeb9de572f118aa96f8828358cf2ecbfdad2df6137dcccab9bfe97ab32e427e23d86525219482a056aa520115df9edd3708d42a758ed14d0401bfc5913a92569695584697347ba97c6751cc9ef9cf9415fcb95fa53143b2cf63dec4667df8f12593f451b2023f89db7d340", 0xbd, 0x7}, {&(0x7f00000004c0)="52873afbfd113ca8827e517b680264790623025d624f80276d5b4a78848d5a468a84adc4393450798fdad953da2aeb92ff21fe61d068697d7ca9611040d0894ccc23b873d33b56ef5ac9d8abf6303a7a3d55c88427e41fb9edfb85c766f32eeb7d33f1b3f50ce5aca7ce515a63406f51c7dcc5879bab0562845ffeed6818f27e6bf131a576a8f7941c5090cb851d0969d641d4786a4ef53166e4a07baa8e9d84eba96ab3344a9c1a7d0a7f628013d3eec3cc654347b72e3cece6edb543d6c25950ec6f59f59dda47634f570ecbfa5cf5e50dab136382160c490f2e349c02f4e8aa9ea2f7ee1c2a654559b32693cb577e5ed740ded772de9b", 0xf8, 0x4}], 0x1000010, &(0x7f0000000200)={[{@autocell='autocell'}], [{@dont_hash='dont_hash'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) 20:35:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) fallocate(r2, 0x10, 0x3, 0x4) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) [ 671.998291][T29100] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 672.114943][T29131] kAFS: unparsable volume name 20:35:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x1000, 0x80000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfc6d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000180)='./file0\x00', 0x48c7d, 0x0) [ 672.214797][T29100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 20:35:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) [ 672.303820][T29100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:35:29 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) syz_open_procfs(0x0, 0x0) 20:35:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x90200, 0x0) read$fb(r1, &(0x7f0000000140)=""/101, 0x65) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 672.649109][T29131] kAFS: unparsable volume name 20:35:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) 20:35:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x3d}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xef}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/99) 20:35:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x124, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={[], [], @rand_addr=0x9}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr="879aada4bf9a44f0d85a0af8e0ab9161"}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 673.113891][T29161] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:35:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x10, r0, 0xff) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x1000) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000200)={0x8, 0x28d}) read$usbfs(0xffffffffffffffff, &(0x7f0000000540)=""/56, 0x38) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r1, 0x0, 0x4040001) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r4, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYRESHEX=0x0], 0x3}, 0x1, 0x0, 0x0, 0x28004895}, 0x4040001) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000000000000d40e29c155ec8a45", @ANYRES32=0x0, @ANYBLOB="bfcd062f7215bad8f6", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="8c97c5c099981091a4606b94e4dc539cf5c6baf6310f310b4490f6bf0e2863c3d8a84d4a28938be6680557af203a1275eca09c590444608fe85aa9bc87c3682ccf5fdc505fd12e17e141461a1114fd5667117c66806433e45731fc031a254fd4d816ac95c4c1cf0057c783934faf8bbf164f1adcc917e418a1b97714d2177d6f02916bac9c2dd81417791f0d6afbf5b7ada39730031a624837605fdfde8d5bcc877be3c0110b0c20189d9613f70b00000000000000"], 0x8, 0x2) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='uppBrdir=./file0,lowr=.:file0,wore1\x00\x00\x00\x00']) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x6, 0x2000) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x10001) 20:35:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, 0x0) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 673.226592][T29161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.275950][T29161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:35:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:35:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, 0x0) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:30 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) syz_open_procfs(0x0, 0x0) [ 673.597640][T29204] mmap: syz-executor.0 (29204) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 673.626716][T29199] overlayfs: unrecognized mount option "uppBrdir=./file0" or missing value [ 673.712643][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 673.712666][ T27] audit: type=1804 audit(1584045330.551:765): pid=29216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/564/file0/bus" dev="loop2" ino=100 res=1 20:35:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, 0x0) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'gre0\x00', &(0x7f00000002c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x5, 0x0, 0x2b, 0x7, 0x7, 0x2, 0x20, 0x8000, 0xffffff62, 0x3, 0xfffffff9, 0x1, 0x3, 0x7, 0x6, 0x8a, 0x4000, 0x81, 0xfffffffa, 0x6, 0xe3d6, 0x40, 0x81, 0x6, 0xffff, 0x8001, 0x0, 0x2, 0x2, 0x0, 0xe06, 0x3, 0x2, 0xbc, 0xd83b, 0xfff, 0x1, 0x2, 0x7, 0xfffffff8, 0x8, 0x6, 0x6, 0x3, 0x32df, 0x3ff, 0x8, 0x8000, 0x7ff, 0x3, 0x8, 0x0, 0x0, 0x5, 0xae, 0xff, 0x3, 0x0, 0x0, 0x0, 0x6ed, 0x200, 0x8, 0x4, 0x3, 0x2, 0x800, 0x4, 0x100, 0x0, 0x800, 0x3, 0x31, 0x3d, 0x1000, 0xffffff01, 0x20, 0x80000001, 0x2, 0x9, 0x8001, 0xfffffffb, 0x8001, 0x1000, 0x3, 0x3e, 0x3, 0x8, 0x401, 0xffffffff, 0x22, 0x7fffffff, 0xf81, 0x7, 0x80, 0x1, 0x7, 0x2, 0x24f, 0x4, 0x4, 0xcb1, 0x6, 0x8, 0x9, 0x20, 0x3, 0x2, 0x3, 0x20, 0x8, 0x1, 0x2, 0x8, 0x9, 0x9, 0x4, 0x7, 0xf665, 0x6, 0x5, 0xffff, 0xd8de, 0x25e7, 0x8, 0x4, 0x200, 0x1cb4], "69954cd4d3f2d482c69f75172b4c69be51dae23cc13c154190931b044649550d2cb3dff9d3c167bc8b9822d9d740b41c940f9a3a446640697fe1979aa08654fd03cf05e66f9979d874b11df6d9fb977f2b670e19505446c9a2ab048da547491cccd31ad3fce3449cd44431f3d50a5f5aaf1ff71617f5"}}) prctl$PR_GET_SECUREBITS(0x1b) [ 673.925925][T29228] overlayfs: unrecognized mount option "uppBrdir=./file0" or missing value 20:35:30 executing program 0: creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) dup2(r4, r0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 674.115188][ T27] audit: type=1804 audit(1584045330.951:766): pid=29235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/565/file0/bus" dev="loop2" ino=101 res=1 [ 674.154522][T29221] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 674.221167][T29221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 674.234200][T29221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 20:35:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0xffffffffffffff01]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 674.521735][ T27] audit: type=1804 audit(1584045331.361:767): pid=29252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/566/file0/bus" dev="loop2" ino=102 res=1 20:35:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r5, r3) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r7}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x5, 0x4, "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", 0xaf, 0xff, 0x7, 0x9, 0xc2, 0x1f, 0x8, 0x1}, r8}}, 0x120) ioctl(r2, 0x8001, &(0x7f0000000280)="5624ddd15292e093eaf65c087a7aaaacd6878b4a3969204e4669a1a945dd89e7fbb9dda7d1b4fe4be4bbc4aae5a33c45a09593dbe643b18f34844c6a6708c3a960a48ee9bcf210f06d1d1760182a9663d421512607bd6fb74387d7a003cf") write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f00000000c0)={{0x7, 0x1}, 0x0, 0x60, 0x7ff, {0x5, 0x3f}, 0x3, 0x1}) 20:35:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x100000000000, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0x6}, {0xa, 0x100, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:31 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x4c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:31 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98bd459e7e3a44"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 20:35:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 675.146468][ T27] audit: type=1804 audit(1584045331.981:768): pid=29285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/567/file0/bus" dev="loop2" ino=103 res=1 20:35:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:32 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="005042488c23492881ad93efde8b98bd459e7e3a44"], 0x4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_MASK={0x6}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 675.436822][T29282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:35:32 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvme-fabrics\x00', 0x101200, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f00000003c0)={0x1, 0x0, {0x7, 0x1f, 0x9, 0x6}}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000380)={r7, 0x100000000, 0x38a}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x0, 0x20800}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x7, 0x4400) ioctl$EVIOCGSW(r9, 0x8040451b, &(0x7f0000000140)=""/184) [ 675.525259][T29282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 675.533168][ T27] audit: type=1804 audit(1584045332.361:769): pid=29306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/568/file0/bus" dev="loop2" ino=104 res=1 [ 675.558957][T29282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 675.608959][ T27] audit: type=1804 audit(1584045332.451:770): pid=29314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir304586846/syzkaller.xfI3wU/723/file0" dev="sda1" ino=16846 res=1 [ 675.643055][ T27] audit: type=1804 audit(1584045332.481:771): pid=29314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir304586846/syzkaller.xfI3wU/723/file0" dev="sda1" ino=16846 res=1 20:35:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 675.697645][ T27] audit: type=1804 audit(1584045332.521:772): pid=29315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir304586846/syzkaller.xfI3wU/723/file0" dev="sda1" ino=16846 res=1 20:35:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 675.754363][ T27] audit: type=1804 audit(1584045332.541:773): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir304586846/syzkaller.xfI3wU/723/file0" dev="sda1" ino=16846 res=1 [ 675.885427][ T27] audit: type=1804 audit(1584045332.711:774): pid=29320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/569/file0/bus" dev="loop2" ino=105 res=1 20:35:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) 20:35:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) open(0x0, 0x0, 0x0) 20:35:33 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x101040, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$fb(r5, &(0x7f0000000140)=""/141, 0x8d) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:35:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) prlimit64(r2, 0xd, &(0x7f0000000100)={0x2, 0xffffffffffffffc1}, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x111, 0x9}}, 0x20) 20:35:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000000c0)) 20:35:33 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:33 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:35:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) open(0x0, 0x0, 0x0) 20:35:34 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) socket$phonet(0x23, 0x2, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote, 0x200000}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:34 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fchdir(r3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x4, &(0x7f0000000180)=""/103) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x401, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 20:35:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) open(0x0, 0x0, 0x0) 20:35:34 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) sendfile(r0, r1, &(0x7f0000000000)=0x1, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@int=0x9, 0x4) 20:35:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x1, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x28000, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:35:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x460402, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x393a45686170ae62}}, 0x20) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) sendfile(r8, r4, &(0x7f0000000000), 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 20:35:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000040)="230000002e0007041dfffd", 0xb}], 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x118001, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x0, 0x2, 0x3, 0x5, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r3}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r5}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800000fb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20:35:35 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) open(0x0, 0x0, 0x0) [ 678.807337][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 678.807352][ T27] audit: type=1804 audit(1584045335.651:782): pid=29486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/576/file0/bus" dev="loop2" ino=112 res=1 20:35:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x2, 0x6, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880), 0x1b}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:35:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff11, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) 20:35:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 679.165634][ T27] audit: type=1804 audit(1584045336.001:783): pid=29520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/577/file0/bus" dev="loop2" ino=113 res=1 20:35:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000140)={0x8000, 0x80000000}) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x40, 0x0) 20:35:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000280)={0x0, 0x6, 0x8000, r2, 0x0, &(0x7f0000000200)={0x9c0905, 0x1ff, [], @p_u8=&(0x7f0000000080)=0x64}}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000140)}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000100)={0x0, 0x4}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) 20:35:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:36 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) [ 679.545442][ T27] audit: type=1804 audit(1584045336.381:784): pid=29539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/578/file0/bus" dev="loop2" ino=114 res=1 20:35:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000001280)={r4}, &(0x7f0000001380)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={r4, 0x5c, &(0x7f0000000380)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e24, 0x29074949, @empty, 0x6}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000480)={0xf4, 0x2, 0x6a, 0x3d6f, r5}, &(0x7f00000004c0)=0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffd, 0x3f00}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="000227bd7000fbdbdf25010000000000000002410000001000137564703a7379013000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20c4011}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20004084) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000500)={0x73622a85, 0x10a}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000200)={0x0, r9+30000000}, 0x0) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:35:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:36 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 679.965473][ T27] audit: type=1804 audit(1584045336.801:785): pid=29561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/579/file0/bus" dev="loop2" ino=115 res=1 20:35:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x2, 0x0, [0x800, 0x4, 0xff, 0x8, 0x1, 0x80000000, 0x5, 0xed]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f00000000c0)={{0x0, @addr=0x6}, 0x8, 0x3, 0x20}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000100)=0x8, 0x4) [ 680.057795][T29569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29569 comm=syz-executor.4 20:35:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) [ 680.276973][ T27] audit: type=1804 audit(1584045337.111:786): pid=29583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/580/file0/bus" dev="loop2" ino=116 res=1 20:35:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x109280, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) ioctl$int_in(r2, 0x5452, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r6}}, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) 20:35:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(0xffffffffffffffff, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:37 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000003c0)=0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 680.781192][T29609] attempt to access beyond end of device [ 680.786884][T29609] loop2: rw=2049, want=78, limit=63 [ 680.792186][T29609] buffer_io_error: 26 callbacks suppressed [ 680.792198][T29609] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 680.806587][T29609] attempt to access beyond end of device [ 680.812277][T29609] loop2: rw=2049, want=79, limit=63 [ 680.817852][T29609] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 680.826366][T29609] attempt to access beyond end of device [ 680.832074][T29609] loop2: rw=2049, want=80, limit=63 [ 680.837341][T29609] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 680.845789][T29609] attempt to access beyond end of device [ 680.851484][T29609] loop2: rw=2049, want=81, limit=63 [ 680.856695][T29609] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 680.865246][T29609] attempt to access beyond end of device [ 680.870964][T29609] loop2: rw=2049, want=130, limit=63 [ 680.876258][T29609] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 680.884865][T29609] attempt to access beyond end of device [ 680.890573][T29609] loop2: rw=2049, want=131, limit=63 [ 680.895886][T29609] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 680.904511][T29609] attempt to access beyond end of device [ 680.910210][T29609] loop2: rw=2049, want=132, limit=63 [ 680.915501][T29609] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 680.924110][T29609] attempt to access beyond end of device [ 680.929791][T29609] loop2: rw=2049, want=133, limit=63 [ 680.935087][T29609] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 680.943706][T29609] attempt to access beyond end of device [ 680.949381][T29609] loop2: rw=2049, want=142, limit=63 [ 680.954681][T29609] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 680.963324][T29609] attempt to access beyond end of device [ 680.969245][T29609] loop2: rw=2049, want=143, limit=63 20:35:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfeb4, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0xa540ee639395df81, 0x1}}, 0xfffffd60) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x2, 0xa}}, 0x20) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000100)={0x9, 0x3, 0x4, 0x20000, 0x7, {0x77359400}, {0x3, 0xc, 0x9, 0x1f, 0x5, 0x8, "d4c9f164"}, 0x2, 0x1, @offset=0xffffffff, 0x3, 0x0, 0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000180)) 20:35:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x1000, 0x80000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfc6d}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000180)='./file0\x00', 0x48c7d, 0x0) 20:35:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000007e00)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000007e40)={0x1ff, {{0x2, 0x4e20, @rand_addr=0x72b}}}, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x33) [ 680.974543][T29609] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 680.983137][T29609] attempt to access beyond end of device [ 680.988827][T29609] loop2: rw=2049, want=144, limit=63 [ 680.994151][T29609] attempt to access beyond end of device [ 680.999872][T29609] loop2: rw=2049, want=145, limit=63 [ 681.005377][T29609] attempt to access beyond end of device [ 681.011086][T29609] loop2: rw=2049, want=257, limit=63 [ 681.034749][ T27] audit: type=1804 audit(1584045337.871:787): pid=29609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/581/file0/bus" dev="loop2" ino=117 res=1 20:35:37 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(0xffffffffffffffff, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000100000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000140)={r6, 0x1, 0x6, @dev={[], 0x16}}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r7}}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:38 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 681.277761][T11083] attempt to access beyond end of device [ 681.283540][T11083] loop2: rw=1, want=78, limit=63 [ 681.297963][T11083] attempt to access beyond end of device 20:35:38 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000001280)=@urb_type_iso={0x0, {0x3, 0x1}, 0x5, 0x1, &(0x7f0000000100)="b2ce027a5d428c39cd3dfa9eda3e8079a83c3c901667e1449459878dfb62f2af4598305219d81c818973d8c66ecc68f813f381b65ce6edbd3c61062889cf55fdca76ee32160aadbcf3b407272d40520a736a220512a0913bd8768c527a9b45d79cbf6d7bfab2ddec9779509c6fdc288e19c14a4f8b88a1df8292f8b6beb547cd2d69adf863fb6db89a89f38b7fea9985933b4c", 0x93, 0x7ff, 0x9, 0x44, 0x7, 0xfffffffe, &(0x7f0000000280)="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", [{0x7, 0x3, 0x7}, {0x3, 0x7, 0x5}, {0x40, 0x57eefa7f, 0x10001}, {0x4, 0x0, 0xfffffff7}, {0x6, 0x4, 0x3}, {0x5a4cd0eb, 0x9, 0x10000}, {0x5, 0x40, 0x100}, {0x6f70, 0xedf, 0x9}, {0x9, 0x1000, 0x7fffffff}, {0x40, 0xb7f, 0xfffffff9}, {0x7fff, 0xfff, 0x9}, {0x6, 0xf36f, 0x6}, {0x1, 0x2, 0x8}, {0x6, 0x4, 0x4}, {0x701, 0x7fffffff}, {0x10000, 0xffff, 0x4}, {0x1ff, 0x7fff, 0x3}, {0x10000, 0x8, 0x5}, {0x0, 0xfeaf, 0x9c69}, {0x9, 0x1f, 0x20}, {0x7e, 0xcfe, 0x800}, {0x1, 0x80, 0x1f}, {0x1, 0x3ff, 0x40}, {0x10001, 0x4, 0x2}, {0x3, 0x80000, 0x20a}, {0x5, 0x7, 0x4}, {0x9, 0x5, 0x6}, {0x401, 0x5}, {0xe83f, 0x3ff, 0x6}, {0x7, 0x6, 0x8}, {0x3ff, 0x7fff, 0x9e7}, {0x4f, 0x7, 0x81}, {0x200, 0x9, 0x38d0}, {0x5, 0x8, 0x9}, {0x2, 0x9, 0x6}, {0x1, 0x5, 0x7}, {0x0, 0x20, 0x7fff}, {0x8001, 0xe1984400, 0x1}, {0x9de, 0x6, 0x6}, {0x66f, 0x50ae, 0x7}, {0x7ff, 0x3, 0x9}, {0x10000, 0xfffffff9, 0x80000000}, {0x8001, 0xf8d2, 0xffff}, {0xf42, 0x8000, 0x7}, {0x281, 0x7ff, 0x2}, {0x5, 0x800}, {0x1, 0x1, 0x8}, {0xe0000000, 0x4, 0x2c52}, {0x4, 0x7d509455, 0x4}, {0x1, 0x7ff, 0x3}, {0x1, 0x4, 0x7ff}, {0x17a1a532, 0x0, 0xfffffffc}, {0x2, 0x86, 0x36}, {0x5, 0x3, 0x5}, {0x1, 0x5f5, 0x8}, {0x101, 0x2, 0xfffff000}, {0x736, 0x7f6, 0x3f}, {0x5, 0x1, 0x8}, {0x0, 0x3f}, {0x8, 0x9, 0x1}, {0x9, 0xa9, 0x8a}, {0xffffff00, 0x0, 0x5}, {0x7, 0x7, 0x7}, {0x401, 0xf2, 0x2444}, {0x877, 0x217, 0x9}, {0x1ff, 0x3abe, 0xfffff515}, {0x200, 0x20, 0x5830}, {0x9, 0x2, 0x8}]}) [ 681.338380][T11083] loop2: rw=1, want=79, limit=63 [ 681.354169][T11083] attempt to access beyond end of device [ 681.388847][T11083] loop2: rw=1, want=80, limit=63 [ 681.410783][T11083] attempt to access beyond end of device [ 681.426349][T11083] loop2: rw=1, want=81, limit=63 [ 681.456594][T11083] attempt to access beyond end of device [ 681.476044][T11083] loop2: rw=1, want=130, limit=63 [ 681.494730][T11083] attempt to access beyond end of device [ 681.526081][T11083] loop2: rw=1, want=131, limit=63 20:35:38 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 681.546537][T11083] attempt to access beyond end of device [ 681.560465][T11083] loop2: rw=1, want=132, limit=63 [ 681.584022][T11083] attempt to access beyond end of device [ 681.639003][T11083] loop2: rw=1, want=133, limit=63 [ 681.652180][T11083] attempt to access beyond end of device [ 681.670512][T11083] loop2: rw=1, want=142, limit=63 [ 681.686381][T11083] attempt to access beyond end of device 20:35:38 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 681.711555][T11083] loop2: rw=1, want=143, limit=63 [ 681.730633][T11083] attempt to access beyond end of device 20:35:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) [ 681.779587][T11083] loop2: rw=1, want=144, limit=63 20:35:38 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 681.807768][T11083] attempt to access beyond end of device [ 681.827308][T11083] loop2: rw=1, want=145, limit=63 20:35:38 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) readv(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/40, 0x28}], 0x1) 20:35:38 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 681.848226][T11083] attempt to access beyond end of device [ 681.873203][T11083] loop2: rw=1, want=257, limit=63 20:35:38 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 682.165854][T29678] attempt to access beyond end of device [ 682.171637][T29678] loop2: rw=2049, want=78, limit=63 [ 682.176885][T29678] attempt to access beyond end of device [ 682.182817][T29678] loop2: rw=2049, want=79, limit=63 [ 682.188113][T29678] attempt to access beyond end of device [ 682.193746][T29678] loop2: rw=2049, want=80, limit=63 [ 682.199062][T29678] attempt to access beyond end of device [ 682.204703][T29678] loop2: rw=2049, want=81, limit=63 [ 682.210032][T29678] attempt to access beyond end of device [ 682.215670][T29678] loop2: rw=2049, want=130, limit=63 [ 682.221053][T29678] attempt to access beyond end of device [ 682.226697][T29678] loop2: rw=2049, want=131, limit=63 [ 682.232069][T29678] attempt to access beyond end of device [ 682.237755][T29678] loop2: rw=2049, want=132, limit=63 [ 682.243080][T29678] attempt to access beyond end of device [ 682.248901][T29678] loop2: rw=2049, want=133, limit=63 [ 682.254216][T29678] attempt to access beyond end of device [ 682.259879][T29678] loop2: rw=2049, want=142, limit=63 [ 682.265215][T29678] attempt to access beyond end of device [ 682.271104][T29678] loop2: rw=2049, want=143, limit=63 [ 682.276435][T29678] attempt to access beyond end of device [ 682.282134][T29678] loop2: rw=2049, want=144, limit=63 [ 682.288389][T29678] attempt to access beyond end of device [ 682.294046][T29678] loop2: rw=2049, want=145, limit=63 [ 682.299741][T29678] attempt to access beyond end of device [ 682.305393][T29678] loop2: rw=2049, want=257, limit=63 [ 682.314377][ T27] audit: type=1804 audit(1584045339.151:788): pid=29678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/582/file0/bus" dev="loop2" ino=118 res=1 20:35:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(0xffffffffffffffff, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x84800) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x103c0bc2da33b4b2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x33) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r1, 0x2}}, 0x18) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x7e00, 0x5, 0x5}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x42801, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000200)=0x92a) 20:35:39 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 682.492882][T11083] attempt to access beyond end of device [ 682.498877][T11083] loop2: rw=1, want=78, limit=63 [ 682.503869][T11083] attempt to access beyond end of device [ 682.537207][T11083] loop2: rw=1, want=79, limit=63 [ 682.543116][T11083] attempt to access beyond end of device [ 682.549359][T11083] loop2: rw=1, want=80, limit=63 [ 682.554681][T11083] attempt to access beyond end of device [ 682.562490][T11083] loop2: rw=1, want=81, limit=63 [ 682.568084][T11083] attempt to access beyond end of device [ 682.575070][T11083] loop2: rw=1, want=130, limit=63 [ 682.580518][T11083] attempt to access beyond end of device 20:35:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 682.587960][T11083] loop2: rw=1, want=131, limit=63 [ 682.636858][T11083] attempt to access beyond end of device [ 682.660298][T11083] loop2: rw=1, want=132, limit=63 20:35:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x44) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 682.683713][T11083] attempt to access beyond end of device [ 682.728053][T11083] loop2: rw=1, want=133, limit=63 [ 682.733465][T11083] attempt to access beyond end of device [ 682.753601][T11083] loop2: rw=1, want=142, limit=63 20:35:39 executing program 4: socket$inet6(0xa, 0x40000080806, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 20:35:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 682.787165][T11083] attempt to access beyond end of device [ 682.823132][T11083] loop2: rw=1, want=143, limit=63 [ 682.864193][T11083] attempt to access beyond end of device [ 682.892702][T11083] loop2: rw=1, want=144, limit=63 20:35:39 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0xf, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 682.927180][T11083] attempt to access beyond end of device [ 682.932849][T11083] loop2: rw=1, want=145, limit=63 [ 683.014983][T11083] attempt to access beyond end of device [ 683.040702][T11083] loop2: rw=1, want=257, limit=63 20:35:39 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) fsmount(r2, 0x0, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 683.287824][T29737] attempt to access beyond end of device [ 683.293526][T29737] loop2: rw=2049, want=78, limit=63 [ 683.298975][T29737] attempt to access beyond end of device [ 683.304658][T29737] loop2: rw=2049, want=79, limit=63 [ 683.310006][T29737] attempt to access beyond end of device [ 683.315687][T29737] loop2: rw=2049, want=80, limit=63 [ 683.321026][T29737] attempt to access beyond end of device [ 683.326708][T29737] loop2: rw=2049, want=81, limit=63 [ 683.332171][T29737] attempt to access beyond end of device [ 683.337931][T29737] loop2: rw=2049, want=130, limit=63 [ 683.343290][T29737] attempt to access beyond end of device [ 683.349010][T29737] loop2: rw=2049, want=131, limit=63 [ 683.354371][T29737] attempt to access beyond end of device [ 683.360076][T29737] loop2: rw=2049, want=132, limit=63 [ 683.365436][T29737] attempt to access beyond end of device [ 683.371163][T29737] loop2: rw=2049, want=133, limit=63 [ 683.376527][T29737] attempt to access beyond end of device [ 683.382258][T29737] loop2: rw=2049, want=142, limit=63 [ 683.387660][T29737] attempt to access beyond end of device [ 683.393336][T29737] loop2: rw=2049, want=143, limit=63 [ 683.398748][T29737] attempt to access beyond end of device [ 683.404434][T29737] loop2: rw=2049, want=144, limit=63 [ 683.409848][T29737] attempt to access beyond end of device [ 683.412923][ T27] audit: type=1804 audit(1584045340.251:789): pid=29740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/459/file0" dev="sda1" ino=16894 res=1 [ 683.415514][T29737] loop2: rw=2049, want=145, limit=63 [ 683.415713][T29737] attempt to access beyond end of device [ 683.454343][T29737] loop2: rw=2049, want=257, limit=63 [ 683.489047][ T27] audit: type=1804 audit(1584045340.301:790): pid=29742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/583/file0/bus" dev="loop2" ino=119 res=1 20:35:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:40 executing program 1: set_mempolicy(0x40000000004003, &(0x7f00000000c0)=0x8, 0xc2) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3180, 0x1) [ 683.555328][ T27] audit: type=1804 audit(1584045340.391:791): pid=29740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/459/file0" dev="sda1" ino=16894 res=1 20:35:40 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) open(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) 20:35:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 683.867728][T29760] attempt to access beyond end of device [ 683.873405][T29760] loop2: rw=2049, want=78, limit=63 [ 683.878723][T29760] attempt to access beyond end of device [ 683.884391][T29760] loop2: rw=2049, want=79, limit=63 [ 683.889746][T29760] attempt to access beyond end of device [ 683.895384][T29760] loop2: rw=2049, want=80, limit=63 [ 683.900718][T29760] attempt to access beyond end of device [ 683.906361][T29760] loop2: rw=2049, want=81, limit=63 [ 683.911749][T29760] attempt to access beyond end of device 20:35:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x6b, 0x0, 0x0, 0x0, 0x3, 0x6}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000007b40)) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x320c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000002540)=[{0x0}, {0x0}, {&(0x7f0000003800)=""/4100, 0xffffff5f}], 0x3, 0x0, 0x17b, 0x3e8}, 0x180) write$binfmt_elf64(r2, &(0x7f0000000f80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYPTR64=&(0x7f0000000900)=ANY=[@ANYBLOB="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"/379, @ANYBLOB="bfc98e8192cb0a9e79f202467c4be532cb8509741d6b35b9087b516de574e75eb6e7307a648644a4648487a557ec9d89ce3c0304e0d899911dc395259c95cc049b413fcc8bb534aee4d921485ca5cf773b0cab00346675446489d0", @ANYPTR64=&(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES64, @ANYRESHEX=0x0, @ANYPTR], @ANYPTR64=&(0x7f0000000440)=ANY=[], @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES64, @ANYRESHEX], @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64, @ANYRES32, @ANYBLOB="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", @ANYBLOB="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"], 0x100000475) getpeername$packet(r1, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x26008814) 20:35:40 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 683.917436][T29760] loop2: rw=2049, want=130, limit=63 [ 683.922749][T29760] attempt to access beyond end of device [ 683.928431][T29760] loop2: rw=2049, want=131, limit=63 [ 683.933770][T29760] attempt to access beyond end of device [ 683.939493][T29760] loop2: rw=2049, want=132, limit=63 [ 683.944813][T29760] attempt to access beyond end of device [ 683.950519][T29760] loop2: rw=2049, want=133, limit=63 [ 683.956271][T29760] attempt to access beyond end of device [ 683.961963][T29760] loop2: rw=2049, want=142, limit=63 [ 683.967318][T29760] attempt to access beyond end of device [ 683.972948][T29760] loop2: rw=2049, want=143, limit=63 [ 683.978343][T29760] attempt to access beyond end of device [ 683.983973][T29760] loop2: rw=2049, want=144, limit=63 [ 683.989350][T29760] attempt to access beyond end of device [ 683.994973][T29760] loop2: rw=2049, want=145, limit=63 [ 684.000565][T29760] attempt to access beyond end of device [ 684.006206][T29760] loop2: rw=2049, want=257, limit=63 [ 684.028172][ T27] audit: type=1804 audit(1584045340.861:792): pid=29760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/584/file0/bus" dev="loop2" ino=120 res=1 20:35:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:41 executing program 1: r0 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x141200, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x9, @time={0x6}, 0x0, {0x81, 0x40}, 0x8, 0x2, 0x1f}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 20:35:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xffffffff, 0x0) write$P9_ROPEN(r2, &(0x7f0000000140)={0x18, 0x71, 0x2, {{0x80, 0x1, 0x2}}}, 0x18) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000180)={@none}) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:41 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:41 executing program 4: syz_emit_ethernet(0x52, &(0x7f00000000c0)={@link_local, @broadcast, @val={@void}, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x0, 0x6, "95f1bf", 0x18, 0x3a, 0x0, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @ipv4={[], [], @remote}}}}}}}}, 0x0) [ 684.587222][T29800] attempt to access beyond end of device [ 684.592894][T29800] loop2: rw=2049, want=78, limit=63 [ 684.598185][T29800] attempt to access beyond end of device [ 684.603822][T29800] loop2: rw=2049, want=79, limit=63 [ 684.609142][T29800] attempt to access beyond end of device [ 684.614776][T29800] loop2: rw=2049, want=80, limit=63 [ 684.620047][T29800] attempt to access beyond end of device [ 684.625683][T29800] loop2: rw=2049, want=81, limit=63 [ 684.630980][T29800] attempt to access beyond end of device [ 684.636617][T29800] loop2: rw=2049, want=130, limit=63 [ 684.642112][T29800] attempt to access beyond end of device [ 684.647911][T29800] loop2: rw=2049, want=131, limit=63 [ 684.653235][T29800] attempt to access beyond end of device [ 684.658913][T29800] loop2: rw=2049, want=132, limit=63 [ 684.664234][T29800] attempt to access beyond end of device [ 684.670033][T29800] loop2: rw=2049, want=133, limit=63 [ 684.675355][T29800] attempt to access beyond end of device [ 684.681066][T29800] loop2: rw=2049, want=142, limit=63 20:35:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) 20:35:41 executing program 1: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 20:35:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 684.686393][T29800] attempt to access beyond end of device [ 684.692088][T29800] loop2: rw=2049, want=143, limit=63 [ 684.697440][T29800] attempt to access beyond end of device [ 684.703071][T29800] loop2: rw=2049, want=144, limit=63 [ 684.708479][T29800] attempt to access beyond end of device [ 684.714110][T29800] loop2: rw=2049, want=145, limit=63 [ 684.719660][T29800] attempt to access beyond end of device [ 684.725301][T29800] loop2: rw=2049, want=257, limit=63 [ 684.738760][ T27] audit: type=1804 audit(1584045341.581:793): pid=29800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/585/file0/bus" dev="loop2" ino=121 res=1 20:35:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x0) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:41 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:42 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 685.133136][T29830] attempt to access beyond end of device [ 685.139045][T29830] loop2: rw=2049, want=78, limit=63 [ 685.144294][T29830] attempt to access beyond end of device [ 685.150008][T29830] loop2: rw=2049, want=79, limit=63 [ 685.155247][T29830] attempt to access beyond end of device [ 685.160942][T29830] loop2: rw=2049, want=80, limit=63 [ 685.166178][T29830] attempt to access beyond end of device [ 685.171848][T29830] loop2: rw=2049, want=81, limit=63 [ 685.177151][T29830] attempt to access beyond end of device 20:35:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 685.182789][T29830] loop2: rw=2049, want=130, limit=63 [ 685.188159][T29830] attempt to access beyond end of device [ 685.193792][T29830] loop2: rw=2049, want=131, limit=63 [ 685.199179][T29830] attempt to access beyond end of device [ 685.204814][T29830] loop2: rw=2049, want=132, limit=63 [ 685.210197][T29830] attempt to access beyond end of device [ 685.215830][T29830] loop2: rw=2049, want=133, limit=63 [ 685.221243][T29830] attempt to access beyond end of device [ 685.226876][T29830] loop2: rw=2049, want=142, limit=63 [ 685.232258][T29830] attempt to access beyond end of device [ 685.237948][T29830] loop2: rw=2049, want=143, limit=63 [ 685.243272][T29830] attempt to access beyond end of device [ 685.249008][T29830] loop2: rw=2049, want=144, limit=63 [ 685.254327][T29830] attempt to access beyond end of device [ 685.260046][T29830] loop2: rw=2049, want=145, limit=63 [ 685.265539][T29830] attempt to access beyond end of device [ 685.271278][T29830] loop2: rw=2049, want=257, limit=63 20:35:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) [ 685.281374][ T27] audit: type=1804 audit(1584045342.121:794): pid=29841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/586/file0/bus" dev="loop2" ino=122 res=1 20:35:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(0x0, 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 685.711459][T29868] attempt to access beyond end of device [ 685.717376][T29868] loop2: rw=2049, want=78, limit=63 [ 685.722620][T29868] attempt to access beyond end of device [ 685.728331][T29868] loop2: rw=2049, want=79, limit=63 [ 685.733572][T29868] attempt to access beyond end of device [ 685.739283][T29868] loop2: rw=2049, want=80, limit=63 [ 685.744520][T29868] attempt to access beyond end of device [ 685.750236][T29868] loop2: rw=2049, want=81, limit=63 [ 685.755499][T29868] attempt to access beyond end of device [ 685.761195][T29868] loop2: rw=2049, want=130, limit=63 [ 685.766514][T29868] attempt to access beyond end of device [ 685.772302][T29868] loop2: rw=2049, want=131, limit=63 [ 685.777692][T29868] attempt to access beyond end of device [ 685.783328][T29868] loop2: rw=2049, want=132, limit=63 [ 685.788721][T29868] attempt to access beyond end of device [ 685.794358][T29868] loop2: rw=2049, want=133, limit=63 [ 685.799719][T29868] buffer_io_error: 93 callbacks suppressed [ 685.799727][T29868] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 685.814116][T29868] attempt to access beyond end of device [ 685.819831][T29868] loop2: rw=2049, want=142, limit=63 [ 685.825124][T29868] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 685.833736][T29868] attempt to access beyond end of device [ 685.839412][T29868] loop2: rw=2049, want=143, limit=63 [ 685.844705][T29868] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 685.853618][T29868] attempt to access beyond end of device 20:35:42 executing program 1: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 20:35:42 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00') sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x8c, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004014}, 0x40048c0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) 20:35:42 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 685.859371][T29868] loop2: rw=2049, want=144, limit=63 [ 685.864662][T29868] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 685.873384][T29868] attempt to access beyond end of device [ 685.879058][T29868] loop2: rw=2049, want=145, limit=63 [ 685.884350][T29868] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 685.893144][T29868] attempt to access beyond end of device [ 685.898816][T29868] loop2: rw=2049, want=257, limit=63 20:35:42 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(0x0, 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:43 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000004c0)={r3, &(0x7f0000000440)=""/77}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x26000, 0x0) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r7, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x2c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r4}) connect$llc(r9, &(0x7f0000000300)={0x1a, 0x336, 0x8, 0x3, 0x7, 0x20, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r13, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) [ 686.382764][T29902] attempt to access beyond end of device [ 686.388571][T29902] loop2: rw=2049, want=78, limit=63 [ 686.393782][T29902] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 686.402328][T29902] attempt to access beyond end of device [ 686.408011][T29902] loop2: rw=2049, want=79, limit=63 [ 686.413217][T29902] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 686.421724][T29902] attempt to access beyond end of device [ 686.427413][T29902] loop2: rw=2049, want=80, limit=63 [ 686.432644][T29902] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 686.441179][T29902] attempt to access beyond end of device [ 686.446818][T29902] loop2: rw=2049, want=81, limit=63 [ 686.452061][T29902] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 686.460631][T29902] attempt to access beyond end of device [ 686.466269][T29902] loop2: rw=2049, want=130, limit=63 [ 686.471618][T29902] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 686.480200][T29902] attempt to access beyond end of device [ 686.485834][T29902] loop2: rw=2049, want=131, limit=63 [ 686.491376][T29902] attempt to access beyond end of device [ 686.497015][T29902] loop2: rw=2049, want=132, limit=63 [ 686.502394][T29902] attempt to access beyond end of device [ 686.508066][T29902] loop2: rw=2049, want=133, limit=63 [ 686.513389][T29902] attempt to access beyond end of device [ 686.519091][T29902] loop2: rw=2049, want=142, limit=63 [ 686.524416][T29902] attempt to access beyond end of device 20:35:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 686.530127][T29902] loop2: rw=2049, want=143, limit=63 [ 686.535465][T29902] attempt to access beyond end of device [ 686.541187][T29902] loop2: rw=2049, want=144, limit=63 [ 686.546513][T29902] attempt to access beyond end of device [ 686.552224][T29902] loop2: rw=2049, want=145, limit=63 [ 686.557813][T29902] attempt to access beyond end of device [ 686.563453][T29902] loop2: rw=2049, want=257, limit=63 20:35:43 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x20101, 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x8001}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x411, 0x7fff0, 0x3d, 0xfffff4fe, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x7f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r8, 0xff7f, 0xd502, 0x2, 0x1, 0x7}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r10 = syz_open_procfs(r9, &(0x7f00000000c0)='stat\x00') preadv(r10, &(0x7f00000017c0), 0x1b4, 0x0) r11 = socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r12, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r12, 0x0, 0x0) r13 = socket$inet(0x2b, 0x801, 0x0) listen(r13, 0x0) listen(r13, 0x0) r14 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r15 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r14, r15, 0x0, 0x4000000000010046) openat$bsg(0xffffffffffffff9c, 0x0, 0x30c00, 0x0) r16 = open(&(0x7f0000000180)='./bus\x00', 0x159242, 0x38) sendfile(r16, 0xffffffffffffffff, 0x0, 0x4000000000010046) r17 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r17, 0xffffffffffffffff, 0x0, 0x4000000000010046) fstat(r17, &(0x7f0000000300)) socket$inet(0x2b, 0x0, 0x0) r18 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r18, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000b40)={0x9e0000, 0x800, 0x0, r18, 0x0, &(0x7f0000000b00)={0xb1e2eca5ede3e39c, 0x7, [], @p_u16=&(0x7f0000000600)=0x9}}) r19 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r19, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x86000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) r20 = socket(0x4, 0x3, 0xff) getsockopt$inet_IP_XFRM_POLICY(r20, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0x4a) r21 = socket$inet(0x2b, 0x0, 0x0) listen(r21, 0x0) listen(r21, 0x0) getsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(r11, 0xc0046686, &(0x7f0000000740)=ANY=[@ANYBLOB="207b859c969375cca2c71cd6e600000000000013d7f8b8a6080eab1257808638d8a92c11b52c09000000eaeaf538adef1ab100000000000000092a2b57c51cc0085f0de052dca416310600b54b499a11a6ba85cd66eed89e0186528b3fdf085a29a0466c22309fa824093580c7195bc2f8ca4349ccf71c3cf26ad4d1bb980ed4cbec3aa7c17918d8cc60d408f5e74dd70000", @ANYRESDEC, @ANYPTR, @ANYRES64=r21, @ANYRESOCT=0x0]) 20:35:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{0x0}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(0x0, 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8400fffffffa) 20:35:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:43 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 686.887990][T29929] attempt to access beyond end of device [ 686.893663][T29929] loop2: rw=2049, want=78, limit=63 [ 686.899217][T29929] attempt to access beyond end of device [ 686.904863][T29929] loop2: rw=2049, want=79, limit=63 [ 686.910206][T29929] attempt to access beyond end of device [ 686.915848][T29929] loop2: rw=2049, want=80, limit=63 [ 686.921162][T29929] attempt to access beyond end of device [ 686.926805][T29929] loop2: rw=2049, want=81, limit=63 [ 686.932209][T29929] attempt to access beyond end of device [ 686.937920][T29929] loop2: rw=2049, want=130, limit=63 [ 686.943244][T29929] attempt to access beyond end of device [ 686.948948][T29929] loop2: rw=2049, want=131, limit=63 [ 686.954291][T29929] attempt to access beyond end of device [ 686.960000][T29929] loop2: rw=2049, want=132, limit=63 [ 686.965334][T29929] attempt to access beyond end of device [ 686.971059][T29929] loop2: rw=2049, want=133, limit=63 [ 686.976389][T29929] attempt to access beyond end of device [ 686.982136][T29929] loop2: rw=2049, want=142, limit=63 [ 686.987509][T29929] attempt to access beyond end of device [ 686.993143][T29929] loop2: rw=2049, want=143, limit=63 [ 686.998532][T29929] attempt to access beyond end of device [ 687.004168][T29929] loop2: rw=2049, want=144, limit=63 [ 687.009554][T29929] attempt to access beyond end of device [ 687.015193][T29929] loop2: rw=2049, want=145, limit=63 [ 687.020778][T29929] attempt to access beyond end of device [ 687.026424][T29929] loop2: rw=2049, want=257, limit=63 20:35:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{0x0}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 687.058678][ T27] audit: type=1400 audit(1584045343.901:795): avc: denied { watch watch_reads } for pid=29940 comm="syz-executor.1" path="/proc/29940" dev="proc" ino=179170 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 20:35:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) 20:35:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r5 = fcntl$getown(r4, 0x9) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r6, r7, 0x0, 0x4, &(0x7f0000000280)='GPL\x00', 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r5, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=')md5sum\x00', r8}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r3}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r9, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x5, @dev={0xfe, 0x80, [], 0x19}, 0xfffffffc}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r1, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/relabel\x00', 0x2, 0x0) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x220040, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000380)={0x8, 0x2, "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"}) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 687.346904][T29952] attempt to access beyond end of device [ 687.352867][T29952] loop2: rw=2049, want=78, limit=63 [ 687.358217][T29952] attempt to access beyond end of device [ 687.363866][T29952] loop2: rw=2049, want=79, limit=63 [ 687.369219][T29952] attempt to access beyond end of device [ 687.374861][T29952] loop2: rw=2049, want=80, limit=63 [ 687.380169][T29952] attempt to access beyond end of device [ 687.385805][T29952] loop2: rw=2049, want=81, limit=63 [ 687.391149][T29952] attempt to access beyond end of device [ 687.396896][T29952] loop2: rw=2049, want=130, limit=63 [ 687.402540][T29952] attempt to access beyond end of device [ 687.408226][T29952] loop2: rw=2049, want=131, limit=63 [ 687.413550][T29952] attempt to access beyond end of device [ 687.419263][T29952] loop2: rw=2049, want=132, limit=63 [ 687.424587][T29952] attempt to access beyond end of device [ 687.430293][T29952] loop2: rw=2049, want=133, limit=63 [ 687.435613][T29952] attempt to access beyond end of device [ 687.441320][T29952] loop2: rw=2049, want=142, limit=63 20:35:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{0x0}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:44 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 687.446653][T29952] attempt to access beyond end of device [ 687.452476][T29952] loop2: rw=2049, want=143, limit=63 [ 687.457867][T29952] attempt to access beyond end of device [ 687.463504][T29952] loop2: rw=2049, want=144, limit=63 [ 687.468887][T29952] attempt to access beyond end of device [ 687.474528][T29952] loop2: rw=2049, want=145, limit=63 [ 687.480108][T29952] attempt to access beyond end of device [ 687.485743][T29952] loop2: rw=2049, want=257, limit=63 [ 687.520118][ T27] audit: type=1804 audit(1584045344.361:796): pid=29952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/590/file0/bus" dev="loop2" ino=126 res=1 20:35:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:44 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x20101, 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x8001}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x411, 0x7fff0, 0x3d, 0xfffff4fe, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x7f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r8, 0xff7f, 0xd502, 0x2, 0x1, 0x7}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = getpid() sched_setscheduler(r9, 0x5, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r10 = syz_open_procfs(r9, &(0x7f00000000c0)='stat\x00') preadv(r10, &(0x7f00000017c0), 0x1b4, 0x0) r11 = socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r12, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r12, 0x0, 0x0) r13 = socket$inet(0x2b, 0x801, 0x0) listen(r13, 0x0) listen(r13, 0x0) r14 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r15 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r14, r15, 0x0, 0x4000000000010046) openat$bsg(0xffffffffffffff9c, 0x0, 0x30c00, 0x0) r16 = open(&(0x7f0000000180)='./bus\x00', 0x159242, 0x38) sendfile(r16, 0xffffffffffffffff, 0x0, 0x4000000000010046) r17 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r17, 0xffffffffffffffff, 0x0, 0x4000000000010046) fstat(r17, &(0x7f0000000300)) socket$inet(0x2b, 0x0, 0x0) r18 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r18, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000b40)={0x9e0000, 0x800, 0x0, r18, 0x0, &(0x7f0000000b00)={0xb1e2eca5ede3e39c, 0x7, [], @p_u16=&(0x7f0000000600)=0x9}}) r19 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r19, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x86000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) r20 = socket(0x4, 0x3, 0xff) getsockopt$inet_IP_XFRM_POLICY(r20, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0x4a) r21 = socket$inet(0x2b, 0x0, 0x0) listen(r21, 0x0) listen(r21, 0x0) getsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(r11, 0xc0046686, &(0x7f0000000740)=ANY=[@ANYBLOB="207b859c969375cca2c71cd6e600000000000013d7f8b8a6080eab1257808638d8a92c11b52c09000000eaeaf538adef1ab100000000000000092a2b57c51cc0085f0de052dca416310600b54b499a11a6ba85cd66eed89e0186528b3fdf085a29a0466c22309fa824093580c7195bc2f8ca4349ccf71c3cf26ad4d1bb980ed4cbec3aa7c17918d8cc60d408f5e74dd70000", @ANYRESDEC, @ANYPTR, @ANYRES64=r21, @ANYRESOCT=0x0]) 20:35:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) 20:35:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, 0x0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:44 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:44 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, 0x0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) [ 688.135202][T29997] attempt to access beyond end of device [ 688.141036][T29997] loop2: rw=2049, want=78, limit=63 [ 688.146288][T29997] attempt to access beyond end of device [ 688.152258][T29997] loop2: rw=2049, want=79, limit=63 [ 688.157571][T29997] attempt to access beyond end of device [ 688.163216][T29997] loop2: rw=2049, want=80, limit=63 [ 688.168542][T29997] attempt to access beyond end of device [ 688.174180][T29997] loop2: rw=2049, want=81, limit=63 [ 688.179533][T29997] attempt to access beyond end of device [ 688.185170][T29997] loop2: rw=2049, want=130, limit=63 [ 688.190566][T29997] attempt to access beyond end of device [ 688.196204][T29997] loop2: rw=2049, want=131, limit=63 [ 688.201598][T29997] attempt to access beyond end of device [ 688.207291][T29997] loop2: rw=2049, want=132, limit=63 [ 688.212623][T29997] attempt to access beyond end of device [ 688.218316][T29997] loop2: rw=2049, want=133, limit=63 [ 688.223657][T29997] attempt to access beyond end of device [ 688.229398][T29997] loop2: rw=2049, want=142, limit=63 20:35:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 688.234756][T29997] attempt to access beyond end of device [ 688.240466][T29997] loop2: rw=2049, want=143, limit=63 [ 688.245804][T29997] attempt to access beyond end of device [ 688.251541][T29997] loop2: rw=2049, want=144, limit=63 [ 688.256893][T29997] attempt to access beyond end of device [ 688.262616][T29997] loop2: rw=2049, want=145, limit=63 [ 688.268213][T29997] attempt to access beyond end of device [ 688.273857][T29997] loop2: rw=2049, want=257, limit=63 [ 688.316828][ T27] audit: type=1804 audit(1584045345.151:797): pid=29997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/591/file0/bus" dev="loop2" ino=127 res=1 20:35:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, 0x0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:45 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8400fffffffa) [ 688.754034][T30027] attempt to access beyond end of device [ 688.759771][T30027] loop2: rw=2049, want=78, limit=63 [ 688.765059][T30027] attempt to access beyond end of device [ 688.770792][T30027] loop2: rw=2049, want=79, limit=63 [ 688.776060][T30027] attempt to access beyond end of device [ 688.781764][T30027] loop2: rw=2049, want=80, limit=63 [ 688.787007][T30027] attempt to access beyond end of device [ 688.792731][T30027] loop2: rw=2049, want=81, limit=63 [ 688.798058][T30027] attempt to access beyond end of device [ 688.803693][T30027] loop2: rw=2049, want=130, limit=63 [ 688.809030][T30027] attempt to access beyond end of device [ 688.814655][T30027] loop2: rw=2049, want=131, limit=63 [ 688.820037][T30027] attempt to access beyond end of device [ 688.825671][T30027] loop2: rw=2049, want=132, limit=63 [ 688.831094][T30027] attempt to access beyond end of device [ 688.836733][T30027] loop2: rw=2049, want=133, limit=63 [ 688.842120][T30027] attempt to access beyond end of device [ 688.847812][T30027] loop2: rw=2049, want=142, limit=63 [ 688.853158][T30027] attempt to access beyond end of device [ 688.858851][T30027] loop2: rw=2049, want=143, limit=63 [ 688.864182][T30027] attempt to access beyond end of device [ 688.869869][T30027] loop2: rw=2049, want=144, limit=63 [ 688.875208][T30027] attempt to access beyond end of device [ 688.880962][T30027] loop2: rw=2049, want=145, limit=63 [ 688.886580][T30027] attempt to access beyond end of device [ 688.892327][T30027] loop2: rw=2049, want=257, limit=63 [ 688.903210][ T27] audit: type=1804 audit(1584045345.741:798): pid=30027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/592/file0/bus" dev="loop2" ino=128 res=1 20:35:45 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:45 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:45 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r5}}, 0xc) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ff9000/0x7000)=nil, 0x81, 0x4, 0x24, &(0x7f0000ffb000/0x4000)=nil, 0xb8}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r6}}, 0x48) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r7, r7, &(0x7f0000000000), 0x8080fffffffe) sendmsg$alg(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000380)="28c52cacdb56c70f83a28071f9f9bde210fbad2910f3f302472b0a6d8c24d77d766743b4d835a9c6013e8bdbb0f32d1d131a7df41990389da11167cef6d90c93ff2e5d431d1272cf4bf93b3be3fbb3d7bd3cefc10081b7447ed720b6194abd627f4502ea16770e5a8e20193662092da58ba8ee8f439dc06f75d46c63fa2f903a3951367e6d975b402331be406608db9ba70e997f7efbae4c5356519b71ea4a304c1824a53129728e72d15ebd87fedc27558ecb6fbe9016e496d0307ceedb00dd9e06abbf08a082ec0b4acfd30c06dcc497b0cb2d63a7fc52c549ac0aea68981afc5fc61ee3738cd3f873", 0xea}, {&(0x7f0000000280)="5d58dedafe677502f8197dc9bc6eca8bce7a9ebf2d2718add26936ab1de8412945f80be9db3ef4949de590d7291ba0ff11a353eed06ffb6e1b39630048b179f8410631ca15bbc06b66", 0x49}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000300)="aa7490", 0x3}, {&(0x7f0000001480)="f138558b074923f74092629bad9c1ebb99a9338057530532b7f53f476c90", 0x1e}], 0x5, 0x0, 0x0, 0x20040841}, 0x20044490) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6}}, 0x10) r8 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r8) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000001580)={0x2, @capture={0x1000, 0x1, {0xa, 0x401}, 0x0, 0x5c3}}) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 20:35:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 689.222673][T30040] attempt to access beyond end of device [ 689.228498][T30040] loop2: rw=2049, want=78, limit=63 [ 689.233740][T30040] attempt to access beyond end of device [ 689.239797][T30040] loop2: rw=2049, want=79, limit=63 [ 689.241681][ T27] audit: type=1804 audit(1584045346.081:799): pid=30047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/467/file0" dev="sda1" ino=16907 res=1 [ 689.245042][T30040] attempt to access beyond end of device [ 689.278438][T30040] loop2: rw=2049, want=80, limit=63 [ 689.283684][T30040] attempt to access beyond end of device [ 689.289598][T30040] loop2: rw=2049, want=81, limit=63 [ 689.294856][T30040] attempt to access beyond end of device [ 689.300531][T30040] loop2: rw=2049, want=130, limit=63 [ 689.305859][T30040] attempt to access beyond end of device [ 689.311576][T30040] loop2: rw=2049, want=131, limit=63 [ 689.316900][T30040] attempt to access beyond end of device [ 689.329135][T30040] loop2: rw=2049, want=132, limit=63 [ 689.334573][T30040] attempt to access beyond end of device [ 689.340276][T30040] loop2: rw=2049, want=133, limit=63 [ 689.345596][T30040] attempt to access beyond end of device [ 689.351302][T30040] loop2: rw=2049, want=142, limit=63 [ 689.356619][T30040] attempt to access beyond end of device [ 689.362315][T30040] loop2: rw=2049, want=143, limit=63 [ 689.367844][T30040] attempt to access beyond end of device 20:35:46 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) [ 689.373485][T30040] loop2: rw=2049, want=144, limit=63 [ 689.379568][T30040] attempt to access beyond end of device [ 689.385208][T30040] loop2: rw=2049, want=145, limit=63 [ 689.390762][T30040] attempt to access beyond end of device [ 689.396402][T30040] loop2: rw=2049, want=257, limit=63 20:35:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) [ 689.437375][ T27] audit: type=1400 audit(1584045346.281:800): avc: denied { map } for pid=30048 comm="syz-executor.1" path="/dev/nullb0" dev="devtmpfs" ino=930 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 20:35:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) 20:35:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) [ 689.625950][ T27] audit: type=1804 audit(1584045346.331:801): pid=30040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/593/file0/bus" dev="loop2" ino=129 res=1 [ 689.668090][ T27] audit: type=1804 audit(1584045346.331:802): pid=30047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/467/file0" dev="sda1" ino=16907 res=1 20:35:46 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 20:35:46 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x230000, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x40000, 0x0, [0x0, 0x1, 0x3, 0x1000, 0x954, 0x3, 0x80000000, 0x101]}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000001c0)=""/47) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) [ 689.938540][T30076] attempt to access beyond end of device [ 689.944216][T30076] loop2: rw=2049, want=78, limit=63 [ 689.949544][T30076] attempt to access beyond end of device [ 689.955185][T30076] loop2: rw=2049, want=79, limit=63 [ 689.960470][T30076] attempt to access beyond end of device [ 689.966107][T30076] loop2: rw=2049, want=80, limit=63 [ 689.971373][T30076] attempt to access beyond end of device [ 689.977012][T30076] loop2: rw=2049, want=81, limit=63 [ 689.982318][T30076] attempt to access beyond end of device [ 689.988008][T30076] loop2: rw=2049, want=130, limit=63 [ 689.993329][T30076] attempt to access beyond end of device [ 689.999017][T30076] loop2: rw=2049, want=131, limit=63 [ 690.004348][T30076] attempt to access beyond end of device [ 690.010241][T30076] loop2: rw=2049, want=132, limit=63 [ 690.015568][T30076] attempt to access beyond end of device [ 690.021278][T30076] loop2: rw=2049, want=133, limit=63 [ 690.026597][T30076] attempt to access beyond end of device [ 690.032304][T30076] loop2: rw=2049, want=142, limit=63 [ 690.037675][T30076] attempt to access beyond end of device [ 690.043304][T30076] loop2: rw=2049, want=143, limit=63 [ 690.048669][T30076] attempt to access beyond end of device [ 690.054303][T30076] loop2: rw=2049, want=144, limit=63 [ 690.059690][T30076] attempt to access beyond end of device [ 690.065324][T30076] loop2: rw=2049, want=145, limit=63 [ 690.071015][T30076] attempt to access beyond end of device [ 690.076664][T30076] loop2: rw=2049, want=257, limit=63 20:35:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) [ 690.085887][ T27] audit: type=1804 audit(1584045346.921:803): pid=30090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/594/file0/bus" dev="loop2" ino=130 res=1 20:35:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) 20:35:47 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, 0x0, 0x0, 0x0) 20:35:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:47 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) [ 690.439352][T30108] attempt to access beyond end of device [ 690.445033][T30108] loop2: rw=2049, want=78, limit=63 [ 690.450477][T30108] attempt to access beyond end of device [ 690.456118][T30108] loop2: rw=2049, want=79, limit=63 [ 690.461378][T30108] attempt to access beyond end of device [ 690.467007][T30108] loop2: rw=2049, want=80, limit=63 [ 690.472319][T30108] attempt to access beyond end of device [ 690.477991][T30108] loop2: rw=2049, want=81, limit=63 [ 690.483251][T30108] attempt to access beyond end of device 20:35:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, 0x0, 0x0, 0x0) [ 690.488938][T30108] loop2: rw=2049, want=130, limit=63 [ 690.494261][T30108] attempt to access beyond end of device [ 690.499942][T30108] loop2: rw=2049, want=131, limit=63 [ 690.505267][T30108] attempt to access beyond end of device [ 690.511037][T30108] loop2: rw=2049, want=132, limit=63 [ 690.516359][T30108] attempt to access beyond end of device [ 690.522062][T30108] loop2: rw=2049, want=133, limit=63 [ 690.527443][T30108] attempt to access beyond end of device [ 690.533074][T30108] loop2: rw=2049, want=142, limit=63 [ 690.538433][T30108] attempt to access beyond end of device [ 690.544071][T30108] loop2: rw=2049, want=143, limit=63 [ 690.549452][T30108] attempt to access beyond end of device [ 690.555098][T30108] loop2: rw=2049, want=144, limit=63 [ 690.560464][T30108] attempt to access beyond end of device [ 690.566096][T30108] loop2: rw=2049, want=145, limit=63 [ 690.571652][T30108] attempt to access beyond end of device [ 690.577329][T30108] loop2: rw=2049, want=257, limit=63 20:35:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, 0x0, 0x0) [ 690.604621][ T27] audit: type=1804 audit(1584045347.441:804): pid=30108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/595/file0/bus" dev="loop2" ino=131 res=1 20:35:47 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)='/', 0x1}], 0x1}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') preadv(r0, 0x0, 0x0, 0x0) 20:35:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x0) 20:35:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33c, 0x0) 20:35:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, 0x0, 0x0) [ 691.071973][T30138] attempt to access beyond end of device [ 691.077794][T30138] loop2: rw=2049, want=78, limit=63 [ 691.083004][T30138] buffer_io_error: 91 callbacks suppressed [ 691.083014][T30138] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 691.097374][T30138] attempt to access beyond end of device [ 691.103012][T30138] loop2: rw=2049, want=79, limit=63 [ 691.108296][T30138] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 691.116742][T30138] attempt to access beyond end of device 20:35:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000040)=@newsa={0x144, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0) [ 691.122435][T30138] loop2: rw=2049, want=80, limit=63 [ 691.127845][T30138] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 691.136306][T30138] attempt to access beyond end of device [ 691.142202][T30138] loop2: rw=2049, want=81, limit=63 [ 691.147481][T30138] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 691.155949][T30138] attempt to access beyond end of device [ 691.161751][T30138] loop2: rw=2049, want=130, limit=63 [ 691.167117][T30138] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 691.175643][T30138] attempt to access beyond end of device [ 691.181367][T30138] loop2: rw=2049, want=131, limit=63 [ 691.186659][T30138] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 691.195286][T30138] attempt to access beyond end of device [ 691.200966][T30138] loop2: rw=2049, want=132, limit=63 [ 691.206257][T30138] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 691.214885][T30138] attempt to access beyond end of device [ 691.220562][T30138] loop2: rw=2049, want=133, limit=63 [ 691.225853][T30138] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 691.234452][T30138] attempt to access beyond end of device [ 691.240127][T30138] loop2: rw=2049, want=142, limit=63 [ 691.245422][T30138] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 691.254005][T30138] attempt to access beyond end of device [ 691.259673][T30138] loop2: rw=2049, want=143, limit=63 [ 691.264962][T30138] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 691.273557][T30138] attempt to access beyond end of device [ 691.279247][T30138] loop2: rw=2049, want=144, limit=63 [ 691.284569][T30138] attempt to access beyond end of device [ 691.290291][T30138] loop2: rw=2049, want=145, limit=63 [ 691.295772][T30138] attempt to access beyond end of device [ 691.301476][T30138] loop2: rw=2049, want=257, limit=63 [ 691.309454][ T27] audit: type=1804 audit(1584045348.151:805): pid=30151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/596/file0/bus" dev="loop2" ino=132 res=1 20:35:48 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, 0x0, 0x0) 20:35:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33c, 0x0) 20:35:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x0) 20:35:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmdt(0x0) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180), 0x8) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) socket(0x0, 0x800, 0x0) r1 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r2, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000380)=[{0x18, 0x84, 0x0, "02"}], 0x18}, 0xfc) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x6d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000500)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0xfc) getpid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x6f2212d0166e13e2}, 0x0, 0x8}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4004ae86, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}], 0x1, 0x0) recvmsg(r5, 0x0, 0x0) 20:35:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, 0x0, 0x1, 0x6000}, 0x0) [ 691.760418][T30174] attempt to access beyond end of device [ 691.766098][T30174] loop2: rw=2049, want=78, limit=63 [ 691.771443][T30174] attempt to access beyond end of device [ 691.777150][T30174] loop2: rw=2049, want=79, limit=63 [ 691.782387][T30174] attempt to access beyond end of device [ 691.788096][T30174] loop2: rw=2049, want=80, limit=63 [ 691.793340][T30174] attempt to access beyond end of device [ 691.799037][T30174] loop2: rw=2049, want=81, limit=63 [ 691.804300][T30174] attempt to access beyond end of device [ 691.810187][T30174] loop2: rw=2049, want=130, limit=63 [ 691.815513][T30174] attempt to access beyond end of device [ 691.821224][T30174] loop2: rw=2049, want=131, limit=63 [ 691.826548][T30174] attempt to access beyond end of device [ 691.832243][T30174] loop2: rw=2049, want=132, limit=63 [ 691.837649][T30174] attempt to access beyond end of device [ 691.843280][T30174] loop2: rw=2049, want=133, limit=63 [ 691.848656][T30174] attempt to access beyond end of device [ 691.854294][T30174] loop2: rw=2049, want=142, limit=63 20:35:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x111, 0x3}}, 0x20) fchdir(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1}) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33c, 0x0) 20:35:48 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 691.859696][T30174] attempt to access beyond end of device [ 691.865428][T30174] loop2: rw=2049, want=143, limit=63 [ 691.870805][T30174] attempt to access beyond end of device [ 691.876434][T30174] loop2: rw=2049, want=144, limit=63 [ 691.881828][T30174] attempt to access beyond end of device [ 691.887541][T30174] loop2: rw=2049, want=145, limit=63 [ 691.893034][T30174] attempt to access beyond end of device [ 691.898744][T30174] loop2: rw=2049, want=257, limit=63 20:35:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, 0x0, 0x1, 0x6000}, 0x0) [ 691.908162][ T27] audit: type=1804 audit(1584045348.751:806): pid=30185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/597/file0/bus" dev="loop2" ino=133 res=1 20:35:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$cont(0x18, r1, 0xffff, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 20:35:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ftruncate(r1, 0x800) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x0) 20:35:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x20101, 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0xe24, @remote}, 0x1b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x8001}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x411, 0x7fff0, 0x3d, 0xfffff4fe, 0x7, r8}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r8, 0x7f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r9, 0xff7f, 0xd502, 0x2, 0x1, 0x7}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r11 = syz_open_procfs(r10, &(0x7f00000000c0)='stat\x00') preadv(r11, &(0x7f00000017c0), 0x1b4, 0x0) r12 = socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r13, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r13, 0x0, 0x0) r14 = socket$inet(0x2b, 0x801, 0x0) listen(r14, 0x0) listen(r14, 0x0) r15 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r15, r16, 0x0, 0x4000000000010046) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x30c00, 0x0) r17 = open(&(0x7f0000000180)='./bus\x00', 0x159242, 0x38) sendfile(r17, 0xffffffffffffffff, 0x0, 0x4000000000010046) r18 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r18, 0xffffffffffffffff, 0x0, 0x4000000000010046) fstat(r18, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETBLKSIZE(r18, 0xc0045004, &(0x7f0000000340)) socket$inet(0x2b, 0x0, 0x0) r19 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r19, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000b40)={0x9e0000, 0x800, 0x0, r19, 0x0, &(0x7f0000000b00)={0xb1e2eca5ede3e39c, 0x7, [], @p_u16=&(0x7f0000000600)=0x9}}) r20 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r20, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r20, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x86000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) r21 = socket(0x4, 0x3, 0xff) getsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0x4a) r22 = socket$inet(0x2b, 0x0, 0x0) listen(r22, 0x0) listen(r22, 0x0) getsockopt$inet_IP_XFRM_POLICY(r22, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(r12, 0xc0046686, &(0x7f0000000740)=ANY=[@ANYBLOB="207b859c969375cca2c71cd6e600000000000013d7f8b8a6080eab1257808638d8a92c11b52c09000000eaeaf538adef1ab100000000000000092a2b57c51cc0085f0de052dca416310600b54b499a11a6ba85cd66eed89e0186528b3fdf085a29a0466c22309fa824093580c7195bc2f8ca4349ccf71c3cf26ad4d1bb980ed4cbec3aa7c17918d8cc60d408f5e74dd70000", @ANYRESDEC, @ANYPTR, @ANYRES64=r22, @ANYRESOCT=0x0]) 20:35:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, 0x0, 0x1, 0x6000}, 0x0) 20:35:49 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 692.488329][T30217] attempt to access beyond end of device [ 692.494039][T30217] loop2: rw=2049, want=78, limit=63 [ 692.499437][T30217] attempt to access beyond end of device [ 692.505122][T30217] loop2: rw=2049, want=79, limit=63 [ 692.510444][T30217] attempt to access beyond end of device [ 692.516188][T30217] loop2: rw=2049, want=80, limit=63 [ 692.521477][T30217] attempt to access beyond end of device [ 692.527153][T30217] loop2: rw=2049, want=81, limit=63 [ 692.532410][T30217] attempt to access beyond end of device [ 692.538084][T30217] loop2: rw=2049, want=130, limit=63 [ 692.543403][T30217] attempt to access beyond end of device [ 692.549078][T30217] loop2: rw=2049, want=131, limit=63 [ 692.554394][T30217] attempt to access beyond end of device [ 692.560084][T30217] loop2: rw=2049, want=132, limit=63 [ 692.565401][T30217] attempt to access beyond end of device [ 692.571203][T30217] loop2: rw=2049, want=133, limit=63 [ 692.576522][T30217] attempt to access beyond end of device [ 692.582239][T30217] loop2: rw=2049, want=142, limit=63 20:35:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={0x0}, 0x1, 0x6000}, 0x0) [ 692.587591][T30217] attempt to access beyond end of device [ 692.593225][T30217] loop2: rw=2049, want=143, limit=63 [ 692.598619][T30217] attempt to access beyond end of device [ 692.604256][T30217] loop2: rw=2049, want=144, limit=63 [ 692.609676][T30217] attempt to access beyond end of device [ 692.615316][T30217] loop2: rw=2049, want=145, limit=63 [ 692.620901][T30217] attempt to access beyond end of device [ 692.626540][T30217] loop2: rw=2049, want=257, limit=63 [ 692.666570][ T27] audit: type=1804 audit(1584045349.491:807): pid=30217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/598/file0/bus" dev="loop2" ino=134 res=1 20:35:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:49 executing program 2: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00~\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3001500ff00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000003b80)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffef}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:35:49 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={0x0}, 0x1, 0x6000}, 0x0) 20:35:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={0x0}, 0x1, 0x6000}, 0x0) 20:35:50 executing program 2: syz_genetlink_get_family_id$team(0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00~\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3001500ff00", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000003b80)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffef}}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) 20:35:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x2a}}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0xfffffffffffffea1) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 20:35:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:50 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, 0x0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:50 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x20101, 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0xe24, @remote}, 0x1b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x8001}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x411, 0x7fff0, 0x3d, 0xfffff4fe, 0x7, r8}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r8, 0x7f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r9, 0xff7f, 0xd502, 0x2, 0x1, 0x7}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r11 = syz_open_procfs(r10, &(0x7f00000000c0)='stat\x00') preadv(r11, &(0x7f00000017c0), 0x1b4, 0x0) r12 = socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r13, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r13, 0x0, 0x0) r14 = socket$inet(0x2b, 0x801, 0x0) listen(r14, 0x0) listen(r14, 0x0) r15 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r15, r16, 0x0, 0x4000000000010046) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x30c00, 0x0) r17 = open(&(0x7f0000000180)='./bus\x00', 0x159242, 0x38) sendfile(r17, 0xffffffffffffffff, 0x0, 0x4000000000010046) r18 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r18, 0xffffffffffffffff, 0x0, 0x4000000000010046) fstat(r18, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETBLKSIZE(r18, 0xc0045004, &(0x7f0000000340)) socket$inet(0x2b, 0x0, 0x0) r19 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r19, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000b40)={0x9e0000, 0x800, 0x0, r19, 0x0, &(0x7f0000000b00)={0xb1e2eca5ede3e39c, 0x7, [], @p_u16=&(0x7f0000000600)=0x9}}) r20 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r20, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r20, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x86000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) r21 = socket(0x4, 0x3, 0xff) getsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0x4a) r22 = socket$inet(0x2b, 0x0, 0x0) listen(r22, 0x0) listen(r22, 0x0) getsockopt$inet_IP_XFRM_POLICY(r22, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(r12, 0xc0046686, &(0x7f0000000740)=ANY=[@ANYBLOB="207b859c969375cca2c71cd6e600000000000013d7f8b8a6080eab1257808638d8a92c11b52c09000000eaeaf538adef1ab100000000000000092a2b57c51cc0085f0de052dca416310600b54b499a11a6ba85cd66eed89e0186528b3fdf085a29a0466c22309fa824093580c7195bc2f8ca4349ccf71c3cf26ad4d1bb980ed4cbec3aa7c17918d8cc60d408f5e74dd70000", @ANYRESDEC, @ANYPTR, @ANYRES64=r22, @ANYRESOCT=0x0]) 20:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, 0x0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, 0x0, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:50 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x0, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x20101, 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0xe24, @remote}, 0x1b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x8001}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x411, 0x7fff0, 0x3d, 0xfffff4fe, 0x7, r8}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r8, 0x7f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r9, 0xff7f, 0xd502, 0x2, 0x1, 0x7}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r11 = syz_open_procfs(r10, &(0x7f00000000c0)='stat\x00') preadv(r11, &(0x7f00000017c0), 0x1b4, 0x0) r12 = socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r13, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r13, 0x0, 0x0) r14 = socket$inet(0x2b, 0x801, 0x0) listen(r14, 0x0) listen(r14, 0x0) r15 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r15, r16, 0x0, 0x4000000000010046) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x30c00, 0x0) r17 = open(&(0x7f0000000180)='./bus\x00', 0x159242, 0x38) sendfile(r17, 0xffffffffffffffff, 0x0, 0x4000000000010046) r18 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r18, 0xffffffffffffffff, 0x0, 0x4000000000010046) fstat(r18, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETBLKSIZE(r18, 0xc0045004, &(0x7f0000000340)) socket$inet(0x2b, 0x0, 0x0) r19 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r19, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000b40)={0x9e0000, 0x800, 0x0, r19, 0x0, &(0x7f0000000b00)={0xb1e2eca5ede3e39c, 0x7, [], @p_u16=&(0x7f0000000600)=0x9}}) r20 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r20, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r20, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x86000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) r21 = socket(0x4, 0x3, 0xff) getsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0x4a) r22 = socket$inet(0x2b, 0x0, 0x0) listen(r22, 0x0) listen(r22, 0x0) getsockopt$inet_IP_XFRM_POLICY(r22, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(r12, 0xc0046686, &(0x7f0000000740)=ANY=[@ANYBLOB="207b859c969375cca2c71cd6e600000000000013d7f8b8a6080eab1257808638d8a92c11b52c09000000eaeaf538adef1ab100000000000000092a2b57c51cc0085f0de052dca416310600b54b499a11a6ba85cd66eed89e0186528b3fdf085a29a0466c22309fa824093580c7195bc2f8ca4349ccf71c3cf26ad4d1bb980ed4cbec3aa7c17918d8cc60d408f5e74dd70000", @ANYRESDEC, @ANYPTR, @ANYRES64=r22, @ANYRESOCT=0x0]) 20:35:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x20101, 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0xe24, @remote}, 0x1b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x8001}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x411, 0x7fff0, 0x3d, 0xfffff4fe, 0x7, r8}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r8, 0x7f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r9, 0xff7f, 0xd502, 0x2, 0x1, 0x7}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r11 = syz_open_procfs(r10, &(0x7f00000000c0)='stat\x00') preadv(r11, &(0x7f00000017c0), 0x1b4, 0x0) r12 = socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r13, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r13, 0x0, 0x0) r14 = socket$inet(0x2b, 0x801, 0x0) listen(r14, 0x0) listen(r14, 0x0) r15 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r15, r16, 0x0, 0x4000000000010046) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x30c00, 0x0) r17 = open(&(0x7f0000000180)='./bus\x00', 0x159242, 0x38) sendfile(r17, 0xffffffffffffffff, 0x0, 0x4000000000010046) r18 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r18, 0xffffffffffffffff, 0x0, 0x4000000000010046) fstat(r18, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETBLKSIZE(r18, 0xc0045004, &(0x7f0000000340)) socket$inet(0x2b, 0x0, 0x0) r19 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r19, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000b40)={0x9e0000, 0x800, 0x0, r19, 0x0, &(0x7f0000000b00)={0xb1e2eca5ede3e39c, 0x7, [], @p_u16=&(0x7f0000000600)=0x9}}) r20 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r20, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r20, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x86000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) r21 = socket(0x4, 0x3, 0xff) getsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0x4a) r22 = socket$inet(0x2b, 0x0, 0x0) listen(r22, 0x0) listen(r22, 0x0) getsockopt$inet_IP_XFRM_POLICY(r22, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(r12, 0xc0046686, &(0x7f0000000740)=ANY=[@ANYBLOB="207b859c969375cca2c71cd6e600000000000013d7f8b8a6080eab1257808638d8a92c11b52c09000000eaeaf538adef1ab100000000000000092a2b57c51cc0085f0de052dca416310600b54b499a11a6ba85cd66eed89e0186528b3fdf085a29a0466c22309fa824093580c7195bc2f8ca4349ccf71c3cf26ad4d1bb980ed4cbec3aa7c17918d8cc60d408f5e74dd70000", @ANYRESDEC, @ANYPTR, @ANYRES64=r22, @ANYRESOCT=0x0]) 20:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x0, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:51 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x15b8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x82) fchdir(r3) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x8) 20:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x0, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x14, r1, 0x301, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x6000}, 0x0) 20:35:51 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:51 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r0, &(0x7f00000017c0), 0x33c, 0x0) 20:35:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x14, r1, 0x301, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x6000}, 0x0) 20:35:52 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x20101, 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0xe24, @remote}, 0x1b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x8001}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x411, 0x7fff0, 0x3d, 0xfffff4fe, 0x7, r8}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r8, 0x7f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r9, 0xff7f, 0xd502, 0x2, 0x1, 0x7}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r11 = syz_open_procfs(r10, &(0x7f00000000c0)='stat\x00') preadv(r11, &(0x7f00000017c0), 0x1b4, 0x0) r12 = socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r13, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r13, 0x0, 0x0) r14 = socket$inet(0x2b, 0x801, 0x0) listen(r14, 0x0) listen(r14, 0x0) r15 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r15, r16, 0x0, 0x4000000000010046) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x30c00, 0x0) r17 = open(&(0x7f0000000180)='./bus\x00', 0x159242, 0x38) sendfile(r17, 0xffffffffffffffff, 0x0, 0x4000000000010046) r18 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r18, 0xffffffffffffffff, 0x0, 0x4000000000010046) fstat(r18, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETBLKSIZE(r18, 0xc0045004, &(0x7f0000000340)) socket$inet(0x2b, 0x0, 0x0) r19 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r19, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000b40)={0x9e0000, 0x800, 0x0, r19, 0x0, &(0x7f0000000b00)={0xb1e2eca5ede3e39c, 0x7, [], @p_u16=&(0x7f0000000600)=0x9}}) r20 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r20, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r20, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x86000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) r21 = socket(0x4, 0x3, 0xff) getsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0x4a) r22 = socket$inet(0x2b, 0x0, 0x0) listen(r22, 0x0) listen(r22, 0x0) getsockopt$inet_IP_XFRM_POLICY(r22, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(r12, 0xc0046686, &(0x7f0000000740)=ANY=[@ANYBLOB="207b859c969375cca2c71cd6e600000000000013d7f8b8a6080eab1257808638d8a92c11b52c09000000eaeaf538adef1ab100000000000000092a2b57c51cc0085f0de052dca416310600b54b499a11a6ba85cd66eed89e0186528b3fdf085a29a0466c22309fa824093580c7195bc2f8ca4349ccf71c3cf26ad4d1bb980ed4cbec3aa7c17918d8cc60d408f5e74dd70000", @ANYRESDEC, @ANYPTR, @ANYRES64=r22, @ANYRESOCT=0x0]) 20:35:52 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x113, 0x0, 0x0, 0x0) 20:35:52 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:52 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000100)={0x5, 0xb3, 0x7, 0x102}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)={0x9, 0x7, 0x6, 0x0, 0x1, 0x20, 0x8, 0x2, 0x80, 0x8, 0x7, 0x48, 0x0, 0x208d, 0x4, 0x1f, 0x4, 0x1f, 0x23, [], 0x8a, 0x1000}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U-', 0x80000001}, 0x16, 0x1) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x14, r1, 0x301, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x6000}, 0x0) 20:35:52 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r0, &(0x7f00000017c0), 0x33c, 0x0) 20:35:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x18, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x6000}, 0x0) 20:35:52 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r0, &(0x7f00000017c0), 0x33c, 0x0) 20:35:52 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:53 executing program 2: 20:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x18, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x6000}, 0x0) 20:35:53 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r0, &(0x7f00000017c0), 0x33c, 0x0) 20:35:53 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x20101, 0x12) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}, {0x2, 0xe24, @remote}, 0x1b6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$sock_inet_SIOCADDRT(r3, 0x890c, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x8001}) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000003c0)={0xf23, 0xe203, 0xc, 0x411, 0x7fff0, 0x3d, 0xfffff4fe, 0x7, r8}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r8, 0x7f}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r9, 0xff7f, 0xd502, 0x2, 0x1, 0x7}, 0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f00000002c0)) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r11 = syz_open_procfs(r10, &(0x7f00000000c0)='stat\x00') preadv(r11, &(0x7f00000017c0), 0x1b4, 0x0) r12 = socket$kcm(0x11, 0xa, 0x300) socket$nl_route(0x10, 0x3, 0x0) r13 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r13, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r13, 0x0, 0x0) r14 = socket$inet(0x2b, 0x801, 0x0) listen(r14, 0x0) listen(r14, 0x0) r15 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r15, r16, 0x0, 0x4000000000010046) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x30c00, 0x0) r17 = open(&(0x7f0000000180)='./bus\x00', 0x159242, 0x38) sendfile(r17, 0xffffffffffffffff, 0x0, 0x4000000000010046) r18 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r18, 0xffffffffffffffff, 0x0, 0x4000000000010046) fstat(r18, &(0x7f0000000300)) ioctl$SNDCTL_DSP_GETBLKSIZE(r18, 0xc0045004, &(0x7f0000000340)) socket$inet(0x2b, 0x0, 0x0) r19 = open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) sendfile(r19, 0xffffffffffffffff, 0x0, 0x4000000000010046) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000b40)={0x9e0000, 0x800, 0x0, r19, 0x0, &(0x7f0000000b00)={0xb1e2eca5ede3e39c, 0x7, [], @p_u16=&(0x7f0000000600)=0x9}}) r20 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r20, 0x402, 0x80000003) write$FUSE_CREATE_OPEN(r20, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x86000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x159042, 0x0) r21 = socket(0x4, 0x3, 0xff) getsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0x4a) r22 = socket$inet(0x2b, 0x0, 0x0) listen(r22, 0x0) listen(r22, 0x0) getsockopt$inet_IP_XFRM_POLICY(r22, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@initdev, @in6=@mcast2}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(r12, 0xc0046686, &(0x7f0000000740)=ANY=[@ANYBLOB="207b859c969375cca2c71cd6e600000000000013d7f8b8a6080eab1257808638d8a92c11b52c09000000eaeaf538adef1ab100000000000000092a2b57c51cc0085f0de052dca416310600b54b499a11a6ba85cd66eed89e0186528b3fdf085a29a0466c22309fa824093580c7195bc2f8ca4349ccf71c3cf26ad4d1bb980ed4cbec3aa7c17918d8cc60d408f5e74dd70000", @ANYRESDEC, @ANYPTR, @ANYRES64=r22, @ANYRESOCT=0x0]) 20:35:53 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x400000007, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x340473bdab116377, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) fchdir(r2) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x7) 20:35:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403f7ff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e2656000008004902e181baf9451cd8"], 0x58) 20:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x18, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x6000}, 0x0) 20:35:53 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 696.614381][ C1] sd 0:0:1:0: [sg0] tag#7594 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 696.624842][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB: Test Unit Ready [ 696.631334][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.640928][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.650548][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.660153][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.669765][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.679351][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.688948][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.698546][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.708142][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.717733][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.727422][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.736984][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.746573][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20:35:53 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r0, &(0x7f00000017c0), 0x33c, 0x0) 20:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) [ 696.756160][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 696.765753][ C1] sd 0:0:1:0: [sg0] tag#7594 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 20:35:53 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r0, &(0x7f00000017c0), 0x33c, 0x0) 20:35:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:53 executing program 0: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 20:35:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {0x4}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x6000}, 0x0) 20:35:54 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) r2 = semget$private(0x0, 0x1, 0x11) semctl$IPC_INFO(r2, 0x1, 0x3, &(0x7f0000000340)=""/93) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f0000000180)=""/165) semop(r2, &(0x7f0000000100)=[{0x1, 0x35f8, 0x1800}, {0x3, 0xff00}, {0x1, 0x8000, 0x800}, {0x3, 0x100, 0xc00}, {0x2, 0x0, 0x1c00}, {0x3, 0x0, 0x800}, {0x3, 0x5, 0x1800}, {0x2, 0xfc00, 0x1000}, {0x3, 0x2d10, 0x1800}], 0x9) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:35:54 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:35:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:54 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 20:35:54 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r1, r0) 20:35:54 executing program 4: 20:35:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:35:54 executing program 4: 20:35:54 executing program 4: 20:35:54 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:06 executing program 0: 20:36:06 executing program 4: 20:36:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:06 executing program 2: 20:36:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000140)={0x1000, &(0x7f0000000380)="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"}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r4}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="0ac6bce389ff59f7c7a205e82740", 0xe, 0x4000, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) 20:36:06 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:06 executing program 2: 20:36:06 executing program 0: 20:36:06 executing program 4: 20:36:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:06 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:06 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x20, 0x0, @empty}, {0xa, 0x4e22, 0x7fffffff, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r3, 0x1c, 0x1, @ib={0x1b, 0x0, 0x3, {"6a4014f7b9ea4290eaa4cf3366e76f56"}, 0x8001, 0x3000000000000000, 0x78}}}, 0xa0) prctl$PR_SET_ENDIAN(0x14, 0x2) 20:36:06 executing program 0: 20:36:06 executing program 2: 20:36:06 executing program 4: 20:36:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:06 executing program 0: 20:36:06 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x10, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:06 executing program 4: 20:36:06 executing program 0: 20:36:06 executing program 2: 20:36:06 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:36:07 executing program 2: 20:36:07 executing program 0: 20:36:07 executing program 4: 20:36:07 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x10, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:07 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:07 executing program 0: 20:36:07 executing program 2: 20:36:07 executing program 4: 20:36:07 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x10, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:07 executing program 4: 20:36:07 executing program 2: 20:36:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) fcntl$addseals(r2, 0x409, 0x4) 20:36:07 executing program 0: 20:36:07 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:07 executing program 4: 20:36:07 executing program 2: 20:36:07 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r0, &(0x7f00000017c0), 0x33c, 0x0) 20:36:07 executing program 2: 20:36:07 executing program 0: 20:36:07 executing program 4: 20:36:07 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:07 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r0, &(0x7f00000017c0), 0x33c, 0x0) 20:36:07 executing program 0: 20:36:08 executing program 0: 20:36:08 executing program 2: 20:36:08 executing program 4: 20:36:08 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r0, &(0x7f00000017c0), 0x33c, 0x0) 20:36:08 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="82000000d153fea11a8fc9a2fa6449000000000000000031863960f8bce3c2797c9ee99d945f53639ae369d3f57afdb86537cee2ea17bcb612565b3ef2fa260000000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000300000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) r5 = syz_open_dev$media(&(0x7f00000013c0)='/dev/media#\x00', 0x4, 0x10000) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000001400)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x5, 0x0, r1, 0x0, &(0x7f0000000180)={0x9b0972, 0x4, [], @value64=0x8}}) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000140)={0x4, 0x8d9, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r7}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r7}}, 0x10) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x94241, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r9, r9, &(0x7f0000000000), 0x8080fffffffe) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x10, &(0x7f0000000140)={r12}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000380)={r12, 0x40, 0x1000, "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"}, 0x1008) ioctl$RTC_UIE_ON(r8, 0x7003) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:36:08 executing program 2: 20:36:08 executing program 4: 20:36:08 executing program 0: 20:36:08 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:08 executing program 2: 20:36:08 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:08 executing program 2: 20:36:08 executing program 4: 20:36:08 executing program 0: [ 711.842022][T31146] sctp: [Deprecated]: syz-executor.3 (pid 31146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 711.842022][T31146] Use struct sctp_sack_info instead 20:36:08 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:08 executing program 4: [ 712.105404][T31164] sctp: [Deprecated]: syz-executor.3 (pid 31164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.105404][T31164] Use struct sctp_sack_info instead 20:36:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000140)) 20:36:09 executing program 0: 20:36:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:09 executing program 2: 20:36:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:09 executing program 4: 20:36:09 executing program 4: 20:36:09 executing program 2: 20:36:09 executing program 0: 20:36:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:09 executing program 4: 20:36:09 executing program 2: 20:36:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:09 executing program 0: 20:36:09 executing program 4: 20:36:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xcfac39d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x0, @initdev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), 0xffffffffffffffff, 0x1}}, 0x18) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @initdev}, r3}}, 0x48) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000001c0)={0x7fffffff, 0x6, 0x4, 0x400000, 0x9cd5, {0x77359400}, {0x4, 0x1, 0x5, 0x2, 0x2, 0x0, "b15bf1e5"}, 0x8, 0x3, @planes=&(0x7f0000000180)={0x6, 0x7, @fd=r7}, 0x9, 0x0, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000000280)={r8, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x0, @initdev}, r11}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r9}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) 20:36:09 executing program 0: 20:36:09 executing program 4: 20:36:09 executing program 2: 20:36:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) [ 713.153379][ T27] audit: type=1804 audit(1584045369.991:808): pid=31221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/484/file0" dev="sda1" ino=16881 res=1 20:36:10 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 713.243474][ T27] audit: type=1804 audit(1584045370.031:809): pid=31221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/484/file0" dev="sda1" ino=16881 res=1 [ 713.317235][ T27] audit: type=1804 audit(1584045370.031:810): pid=31221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/484/file0" dev="sda1" ino=16881 res=1 [ 713.346211][ T27] audit: type=1804 audit(1584045370.111:811): pid=31231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/484/file0" dev="sda1" ino=16881 res=1 [ 713.374561][ T27] audit: type=1804 audit(1584045370.141:812): pid=31231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/484/file0" dev="sda1" ino=16881 res=1 20:36:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @initdev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) [ 713.404217][ T27] audit: type=1804 audit(1584045370.151:813): pid=31221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835173770/syzkaller.J2B4hw/484/file0" dev="sda1" ino=16881 res=1 20:36:10 executing program 4: 20:36:10 executing program 2: 20:36:10 executing program 0: 20:36:10 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:10 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:10 executing program 2: 20:36:10 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x12, r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/protocols\x00') preadv(r1, &(0x7f00000017c0), 0x33c, 0x0) 20:36:10 executing program 4: 20:36:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe2$9p(0x0, 0x0) write(r3, &(0x7f0000000340), 0xfffffdf6) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001280)=ANY=[]) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x200, 0x6, 0x2, 0x0, 0x20, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x30041d03, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x375, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r4, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x0) socket$inet6(0xa, 0x20000000080002, 0x88) 20:36:10 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000017c0)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000280)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20:36:10 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f00000002c0)) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r3) write$sndseq(r5, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100860}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fedbdf251000000006000b001f00000008000200057f0000080007007f00000106000b002b000800000008007f00000114000500fe8000000000000000000000000000bb"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4c880) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) pipe(0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000004c0)=""/152) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000004c0)=""/152) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0xd98}, {0x2, 0x0, 0x800}], 0x2, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000580)=""/173) dup(0xffffffffffffffff) r7 = syz_open_dev$sndseq(0x0, 0x0, 0x1) dup2(r7, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000343000/0x4000)=nil, &(0x7f0000133000/0x1000)=nil, &(0x7f0000401000/0x1000)=nil, &(0x7f00005f3000/0x2000)=nil, &(0x7f0000126000/0x3000)=nil, &(0x7f000037b000/0x2000)=nil, &(0x7f000019b000/0x3000)=nil, &(0x7f00003ca000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000f3000/0x3000)=nil, &(0x7f0000000140)="bced0641db620ad542179b84c83e8d6281e82975a97c890c3b0b58e3d7857924e66bb7a9ddd3dcc698fe1723e8694a0ab90af855354ae836f05d463a3b4eb256cb838b37f90519bf", 0x48, r7}, 0x68) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x4) [ 714.050382][T31252] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -22 [ 714.135403][ T27] audit: type=1400 audit(1584045370.971:814): avc: denied { sys_admin } for pid=31269 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 714.252922][ T27] audit: type=1804 audit(1584045371.091:815): pid=31279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/626/bus" dev="sda1" ino=16519 res=1 [ 714.556861][ T27] audit: type=1804 audit(1584045371.391:816): pid=31286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir028001944/syzkaller.q3Mmya/626/bus" dev="sda1" ino=16519 res=1 [ 795.609463][ T0] NOHZ: local_softirq_pending 08 [ 855.768413][ T0] NOHZ: local_softirq_pending 08 [ 877.527338][ T1084] INFO: task syz-executor.3:31252 blocked for more than 143 seconds. [ 877.535446][ T1084] Not tainted 5.6.0-rc5-syzkaller #0 [ 877.541436][ T1084] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 877.551069][ T1084] syz-executor.3 D29248 31252 10269 0x00004006 [ 877.557470][ T1084] Call Trace: [ 877.560791][ T1084] ? __schedule+0x934/0x1f90 [ 877.565375][ T1084] ? __sched_text_start+0x8/0x8 [ 877.570292][ T1084] ? __lock_acquire+0x14bd/0x3ca0 [ 877.575334][ T1084] schedule+0xd0/0x2a0 [ 877.580218][ T1084] schedule_timeout+0x6db/0xba0 [ 877.585132][ T1084] ? find_held_lock+0x2d/0x110 [ 877.589966][ T1084] ? usleep_range+0x160/0x160 [ 877.594642][ T1084] ? wait_for_completion+0x262/0x3c0 [ 877.599990][ T1084] ? find_held_lock+0x2d/0x110 [ 877.604755][ T1084] ? lock_downgrade+0x7f0/0x7f0 [ 877.610285][ T1084] ? do_raw_spin_lock+0x129/0x2e0 [ 877.615330][ T1084] ? rwlock_bug.part.0+0x90/0x90 [ 877.620315][ T1084] ? _raw_spin_unlock_irq+0x1f/0x80 [ 877.625527][ T1084] wait_for_completion+0x26a/0x3c0 [ 877.630726][ T1084] ? wait_for_completion_interruptible+0x420/0x420 [ 877.637255][ T1084] ? __mutex_unlock_slowpath+0xe2/0x660 [ 877.642858][ T1084] ? wake_up_q+0x140/0x140 [ 877.647448][ T1084] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 877.653374][ T1084] ? cma_cancel_operation+0x731/0x9f0 [ 877.658793][ T1084] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 877.664608][ T1084] rdma_destroy_id+0x66d/0xde0 [ 877.669448][ T1084] ? lockdep_hardirqs_on+0x417/0x5d0 [ 877.674746][ T1084] ucma_close+0x10b/0x300 [ 877.679660][ T1084] ? ucma_free_ctx+0xac0/0xac0 [ 877.684419][ T1084] __fput+0x2da/0x850 [ 877.689435][ T1084] task_work_run+0x13f/0x1b0 [ 877.694065][ T1084] get_signal+0x2054/0x24e0 [ 877.698617][ T1084] ? ucma_notify+0x190/0x190 [ 877.703206][ T1084] ? __might_fault+0x190/0x1d0 [ 877.708037][ T1084] ? _copy_from_user+0x123/0x190 [ 877.713022][ T1084] ? fsnotify+0x770/0xb10 [ 877.717389][ T1084] ? ucma_notify+0x190/0x190 [ 877.722041][ T1084] do_signal+0x7e/0x13f0 [ 877.726267][ T1084] ? fsnotify_first_mark+0x200/0x200 [ 877.731639][ T1084] ? setup_sigcontext+0x820/0x820 [ 877.736660][ T1084] ? kick_process+0xe4/0x170 [ 877.741283][ T1084] ? task_work_add+0x97/0x120 [ 877.745981][ T1084] ? fput_many+0xf6/0x1a0 [ 877.750389][ T1084] ? ksys_write+0x19f/0x250 [ 877.754893][ T1084] ? __ia32_sys_read+0xb0/0xb0 [ 877.759726][ T1084] exit_to_usermode_loop+0x26c/0x360 [ 877.765010][ T1084] do_syscall_64+0x6b1/0x7d0 [ 877.769844][ T1084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 877.775738][ T1084] RIP: 0033:0x45c679 [ 877.779675][ T1084] Code: cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 8f 00 00 00 48 83 ec 68 48 89 6c 24 60 48 8d 6c 24 60 48 8b 5a 10 48 8b 72 18 <48> 8b 7a 20 4c 8b 42 40 4c 8b 4a 08 48 8b 4a 30 48 8b 52 28 48 85 [ 877.799834][ T1084] RSP: 002b:00007fa513b2ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 877.809156][ T1084] RAX: 0000000000000010 RBX: 00007fa513b2f6d4 RCX: 000000000045c679 [ 877.817196][ T1084] RDX: 0000000000000010 RSI: 0000000020000240 RDI: 0000000000000003 [ 877.825174][ T1084] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 877.833219][ T1084] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 877.841327][ T1084] R13: 0000000000000cbe R14: 00000000004cec51 R15: 000000000076bfac [ 877.849713][ T1084] [ 877.849713][ T1084] Showing all locks held in the system: [ 877.857501][ T1084] 1 lock held by khungtaskd/1084: [ 877.862523][ T1084] #0: ffffffff897accc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x53/0x260 [ 877.871915][ T1084] 2 locks held by getty/10210: [ 877.876678][ T1084] #0: ffff888085486090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 877.886041][ T1084] #1: ffffc900018132e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 877.895652][ T1084] 2 locks held by getty/10211: [ 877.900461][ T1084] #0: ffff8880a632b090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 877.910608][ T1084] #1: ffffc900019d32e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 877.920269][ T1084] 2 locks held by getty/10212: [ 877.925027][ T1084] #0: ffff8880a632a090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 877.934375][ T1084] #1: ffffc900019c32e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 877.944446][ T1084] 2 locks held by getty/10213: [ 877.949246][ T1084] #0: ffff888088ee3090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 877.958486][ T1084] #1: ffffc9000185b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 877.968081][ T1084] 2 locks held by getty/10214: [ 877.972832][ T1084] #0: ffff888094965090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 877.982083][ T1084] #1: ffffc900018332e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 877.991694][ T1084] 2 locks held by getty/10215: [ 877.996445][ T1084] #0: ffff888088ee8090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 878.005711][ T1084] #1: ffffc900019b32e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 878.018712][ T1084] 2 locks held by getty/10216: [ 878.023459][ T1084] #0: ffff8880a8578090 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x22/0x80 [ 878.033341][ T1084] #1: ffffc900017eb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x21d/0x1b30 [ 878.042967][ T1084] [ 878.045286][ T1084] ============================================= [ 878.045286][ T1084] [ 878.053743][ T1084] NMI backtrace for cpu 1 [ 878.058119][ T1084] CPU: 1 PID: 1084 Comm: khungtaskd Not tainted 5.6.0-rc5-syzkaller #0 [ 878.066342][ T1084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.076378][ T1084] Call Trace: [ 878.079678][ T1084] dump_stack+0x188/0x20d [ 878.083990][ T1084] nmi_cpu_backtrace.cold+0x70/0xb1 [ 878.089261][ T1084] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 878.094887][ T1084] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 878.100880][ T1084] watchdog+0xa8c/0x1010 [ 878.105105][ T1084] ? reset_hung_task_detector+0x30/0x30 [ 878.110656][ T1084] kthread+0x357/0x430 [ 878.114722][ T1084] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 878.120431][ T1084] ret_from_fork+0x24/0x30 [ 878.125088][ T1084] Sending NMI from CPU 1 to CPUs 0: [ 878.130787][ C0] NMI backtrace for cpu 0 [ 878.130792][ C0] CPU: 0 PID: 11079 Comm: kworker/u4:8 Not tainted 5.6.0-rc5-syzkaller #0 [ 878.130798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.130801][ C0] Workqueue: bat_events batadv_nc_worker [ 878.130807][ C0] RIP: 0010:preempt_count_sub+0x0/0x150 [ 878.130816][ C0] Code: 4c 8b 45 c0 48 8b 45 c8 48 8b 55 d0 e9 20 fc ff ff 89 4d d0 e8 51 21 60 00 8b 4d d0 e9 3a fe ff ff 66 0f 1f 84 00 00 00 00 00 <48> c7 c0 a0 03 3e 8c 53 89 fb 48 ba 00 00 00 00 00 fc ff df 48 89 [ 878.130819][ C0] RSP: 0018:ffffc90006fc7c50 EFLAGS: 00000046 [ 878.130825][ C0] RAX: 0000000000000007 RBX: 0000000000000201 RCX: 1ffffffff187c074 [ 878.130830][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000200 [ 878.130834][ C0] RBP: ffffffff879d9f24 R08: 0000000000000001 R09: ffffed1009bb5b3b [ 878.130839][ C0] R10: ffffed1009bb5b3a R11: ffff88804ddad9d3 R12: ffff888095492580 [ 878.130843][ C0] R13: ffffffff879da6e0 R14: ffff88804dd30b80 R15: 0000000000000076 [ 878.130848][ C0] FS: 0000000000000000(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 878.130852][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.130856][ C0] CR2: ffffffffff600400 CR3: 000000009f06a000 CR4: 00000000001406f0 [ 878.130861][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 878.130865][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 878.130867][ C0] Call Trace: [ 878.130870][ C0] __local_bh_enable_ip+0x138/0x270 [ 878.130874][ C0] batadv_nc_purge_paths+0x264/0x380 [ 878.130877][ C0] batadv_nc_worker+0x2c6/0x760 [ 878.130880][ C0] process_one_work+0x94b/0x1690 [ 878.130883][ C0] ? pwq_dec_nr_in_flight+0x310/0x310 [ 878.130886][ C0] ? do_raw_spin_lock+0x129/0x2e0 [ 878.130889][ C0] worker_thread+0x96/0xe20 [ 878.130892][ C0] ? process_one_work+0x1690/0x1690 [ 878.130894][ C0] kthread+0x357/0x430 [ 878.130898][ C0] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 878.130901][ C0] ret_from_fork+0x24/0x30 [ 878.132439][ T1084] Kernel panic - not syncing: hung_task: blocked tasks [ 878.334322][ T1084] CPU: 1 PID: 1084 Comm: khungtaskd Not tainted 5.6.0-rc5-syzkaller #0 [ 878.342546][ T1084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.352580][ T1084] Call Trace: [ 878.355853][ T1084] dump_stack+0x188/0x20d [ 878.360218][ T1084] panic+0x2e3/0x75c [ 878.364101][ T1084] ? add_taint.cold+0x16/0x16 [ 878.368775][ T1084] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 878.374400][ T1084] ? ___preempt_schedule+0x16/0x18 [ 878.379508][ T1084] ? watchdog+0xa8c/0x1010 [ 878.383903][ T1084] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 878.390054][ T1084] watchdog+0xa9d/0x1010 [ 878.394325][ T1084] ? reset_hung_task_detector+0x30/0x30 [ 878.399857][ T1084] kthread+0x357/0x430 [ 878.403937][ T1084] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 878.409638][ T1084] ret_from_fork+0x24/0x30 [ 878.415277][ T1084] Kernel Offset: disabled [ 878.419602][ T1084] Rebooting in 86400 seconds..