64c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) fcntl$dupfd(r0, 0x0, r1) sendfile(r1, r2, 0x0, 0x1c575) [ 1137.504001][ T28] audit: type=1804 audit(1599472313.871:693): pid=30228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1133/file1/bus" dev="loop4" ino=4 res=1 errno=0 [ 1137.808613][ T28] audit: type=1804 audit(1599472313.911:694): pid=30228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1133/file1/bus" dev="loop4" ino=4 res=1 errno=0 [ 1138.431842][ T28] audit: type=1804 audit(1599472313.951:695): pid=30228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1133/file1/bus" dev="loop4" ino=4 res=1 errno=0 [ 1138.664929][ T28] audit: type=1804 audit(1599472314.141:696): pid=30235 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/954/file0" dev="sda1" ino=16317 res=1 errno=0 [ 1138.699950][T30191] lo speed is unknown, defaulting to 1000 09:51:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioprio_set$uid(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x41, 0x0, "67c73839d05ed29979d4d350524ea58b52ef502e89bbcaf015e84d2ede041d716919e65c6deeed378734d94c3db916e2e3d37af8ee4f9243550945f30d2aeb4ec49a85c5611ff8df00dc767d6c7b17df"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000780)={0x2, 0x0, @status={[0x0, 0x0, 0xffffffff80000001, 0x1ff, 0x119, 0x3]}, [0x4, 0xb1c, 0x0, 0x14, 0x80000000, 0x8, 0xbb, 0x1, 0x0, 0x20, 0xffffffffffffff80, 0x0, 0x101, 0xfffffffffffffffd, 0xff, 0x5, 0x0, 0x1758, 0x4000000, 0x0, 0x0, 0x9, 0x7, 0x1f, 0x9, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x151f, 0x639dfc22, 0x3, 0x1ff, 0x7, 0x9, 0x4, 0x401, 0xc0e, 0x5, 0x2, 0x8, 0x3, 0x0, 0x7, 0x7, 0x690, 0x0, 0xff, 0x401, 0x101, 0x0, 0x800, 0x0, 0x4, 0x3ff, 0x1, 0x7, 0x7, 0x882, 0xfa15, 0x200, 0xffffffffffffffff, 0x100]}) 09:51:55 executing program 5: syz_emit_ethernet(0x15e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f009", 0x128, 0x3a, 0xff, @local={0xfe, 0x80, [0x2, 0x10, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0xb, "a78ce540cd4f791153d5dea6b259fe000000b400000023493b87aa0568f00b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a80202"}, {0x0, 0x14, "ffffffffa005000000000000"}, {0x18, 0x16, "e9a009af127d0c017bd47ac42365bc93ea3715c53394f54195c93201700274ef6f29fa7ab404984494c6c233491b8cd5eccf9b4c65be7579f8669d1e3cec8eb965e5fcba7517cba7f8eb809c12076052034b7511b0dc2fe66927115ec35db14477ed2c8f7f8f5e1d9f6a1612c5f631670292a7b62c5527d821de692100e2de728b18e092d05d56e1c2948d64e382d4bbeda4a0081af345061ee295bc62e5f42fdd64d9af6df83cc0edb259204aa0"}]}}}}}}, 0x0) 09:51:57 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r1, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e17a5", 0x58}], 0x1) 09:51:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, 0x0}, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x1, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffff000b) 09:51:57 executing program 0: unshare(0x400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x98, 0x0, 0x148, 0x0, 0x148, 0x150, 0x240, 0x240, 0x150, 0x240, 0x3, 0x0, {[{{@ip={@empty, @private, 0x0, 0x0, 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68101) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000000)) 09:51:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000180)=@routing, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e25, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0x60, 0x29, 0xb, {0x0, 0x8, [], [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}}}], 0x60}, 0x0) 09:51:57 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r4) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 09:51:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x1, 0x2, 0x8, 0x80000000, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], r3}, 0x40) 09:51:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x4d49, 0x1, 0x0, 0x100}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)={0x3c, 0xc, [], [@hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x10, {0x0, 0x2, 0x1f, 0x5, [0xb]}}, @jumbo={0xc2, 0x4, 0xffffffff}, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x8, 0x151, [0x18000000000, 0x7]}}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x20}, @hao={0xc9, 0x10, @remote}]}, 0x70) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x59}, 0x8) write(r1, &(0x7f0000000140)="9be91b843b8209e530d64c3c09a4ba6b1b59091edcbf78cd2d8291cd904cbd95c9", 0x21) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x2b00, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x17, 0x209, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 09:51:57 executing program 0: open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, &(0x7f0000000840)='no,e\x00') [ 1140.859220][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1140.859271][ T28] audit: type=1804 audit(1599472317.232:701): pid=30302 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/976/bus" dev="sda1" ino=16331 res=1 errno=0 09:51:57 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000001440), 0xfffffc41) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 09:51:57 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r4) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 1140.956661][ T28] audit: type=1804 audit(1599472317.272:702): pid=30302 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/976/bus" dev="sda1" ino=16331 res=1 errno=0 [ 1140.999832][ T28] audit: type=1804 audit(1599472317.332:703): pid=30303 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1134/file1/bus" dev="loop4" ino=5 res=1 errno=0 09:51:57 executing program 1: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x5, 0x6, @local}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)=""/71, 0x47) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) [ 1141.052554][ T28] audit: type=1804 audit(1599472317.412:704): pid=30303 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1134/file1/bus" dev="loop4" ino=5 res=1 errno=0 [ 1141.119164][ T28] audit: type=1804 audit(1599472317.432:705): pid=30303 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1134/file1/bus" dev="loop4" ino=5 res=1 errno=0 [ 1141.148382][T30317] tmpfs: Unknown parameter 'no' 09:51:57 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) dup(r4) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 09:51:57 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x44000600) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 1141.277294][ T28] audit: type=1804 audit(1599472317.472:706): pid=30314 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/977/bus" dev="sda1" ino=16335 res=1 errno=0 [ 1141.437907][ T28] audit: type=1804 audit(1599472317.472:707): pid=30314 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/977/bus" dev="sda1" ino=16335 res=1 errno=0 [ 1141.572284][ T28] audit: type=1800 audit(1599472317.492:708): pid=30317 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16362 res=0 errno=0 [ 1141.625723][ T28] audit: type=1800 audit(1599472317.572:709): pid=30317 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16362 res=0 errno=0 [ 1141.681541][T30334] IPVS: ftp: loaded support on port[0] = 21 [ 1141.735512][ T28] audit: type=1804 audit(1599472317.862:710): pid=30332 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/978/bus" dev="sda1" ino=16381 res=1 errno=0 [ 1141.775004][T30334] lo speed is unknown, defaulting to 1000 09:51:58 executing program 4: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="240000002e0007031dfffd946fa201000100000000000000000000e50c1be3a2f7fffe7e", 0x24}], 0x1}, 0x0) 09:51:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x41, 0x0, "67c73839d05ed29979d4d350524ea58b52ef502e89bbcaf015e84d2ede041d716919e65c6deeed378734d94c3db916e2e3d37af8ee4f9243550945f30d2aeb4ec49a85c5611ff8df00dc767d6c7b17df"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = inotify_init() ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000780)={0x2, 0x0, @status={[0x0, 0x0, 0xffffffff80000001, 0x1ff, 0x119, 0x3]}, [0x4, 0xb1c, 0x0, 0x14, 0x80000000, 0x8, 0xbb, 0x1, 0x8001, 0x20, 0x0, 0x0, 0x101, 0xfffffffffffffffd, 0xff, 0x5, 0x0, 0x1758, 0x4000000, 0x0, 0x0, 0x9, 0x7, 0x1f, 0x9, 0x0, 0x0, 0x0, 0xffff, 0x7fffffff, 0x151f, 0x639dfc22, 0x3, 0x1ff, 0x7, 0x9, 0x4, 0x401, 0xc0e, 0x5, 0x2, 0x8, 0x3, 0x0, 0x7, 0x7, 0x690, 0x0, 0xff, 0x401, 0x101, 0x0, 0x800, 0x0, 0x4, 0x3ff, 0x1, 0x7, 0x7, 0x882, 0xfa15, 0x200, 0xffffffffffffffff, 0x100]}) 09:51:58 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 09:51:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x103}) 09:51:58 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="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", 0x12a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:51:58 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) 09:51:58 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r1, r0) getsockopt$SO_BINDTODEVICE(r0, 0x6, 0x14, &(0x7f0000000000), 0x20a154cc) [ 1142.397647][T30335] IPVS: ftp: loaded support on port[0] = 21 [ 1142.507737][T30373] ptrace attach of "/root/syz-executor.4"[30371] was attempted by "/root/syz-executor.4"[30373] [ 1142.534798][T30335] lo speed is unknown, defaulting to 1000 09:51:59 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000557000/0x3000)=nil, &(0x7f0000556000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r2, 0x0, 0x0, 0x1, 0x0, 0x0) 09:51:59 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file1\x00', 0xe178aa7458cf99b5) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) r1 = accept(r0, &(0x7f00000000c0)=@ipx, &(0x7f0000000180)=0x80) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x3, 'dO'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) chdir(&(0x7f0000000140)='./bus\x00') perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$fou(0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r2, &(0x7f0000000340)=ANY=[], 0x4b) sendfile(r2, r2, &(0x7f0000000200), 0xa198) 09:51:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001f80)={0x0, 0x0, 0x0, [0x6, 0x1, 0x5, 0xfff, 0x100000000], [0x1, 0x1f, 0x3ec, 0x4, 0x7f, 0xfff8000000000000, 0xffffffffffffffff, 0x9, 0x0, 0x6, 0xd7, 0x7, 0x2, 0x7ff, 0x4, 0x69b, 0x7fff, 0x0, 0x4, 0x2, 0xab1, 0x1, 0x1ff, 0x4, 0x25, 0x800, 0x1, 0x200, 0x22, 0x0, 0x4, 0xfff, 0x4, 0x800, 0x5, 0x3, 0x5, 0x7, 0x0, 0xfff, 0x3, 0x6, 0x0, 0x5, 0x8001, 0x5, 0x3, 0x5, 0x401, 0x7f, 0x200, 0x9, 0x7, 0xff, 0x7, 0x4, 0x8, 0x4, 0x9, 0x4, 0x1000, 0xfff, 0x0, 0xffffffff00000001, 0xfffffffffffffeff, 0x4, 0xfffffffffffffff7, 0xfffffffffffffffb, 0x3, 0xffffffffffff8000, 0x20, 0x1, 0x86b, 0x0, 0x1f, 0x3, 0x5, 0x4, 0x1, 0x2dae, 0x300000, 0x401, 0x8f, 0x9, 0x7c1d6e7b, 0x9, 0x96f, 0x5, 0x800, 0x0, 0x300000000000000, 0x9, 0x52e9446e, 0x100000000, 0x7, 0x200, 0x81, 0x2, 0x58, 0x0, 0x800, 0x10000000000000, 0x7f, 0x9, 0x3, 0x0, 0x8, 0x1, 0x0, 0xffffffff, 0x2, 0x0, 0xffffffffffffff57, 0xff, 0x81, 0x8, 0xf0, 0x7, 0xaa, 0x2, 0x7]}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) nanosleep(0x0, &(0x7f0000000140)) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1, 0xd}, 0x0, 0x0) 09:51:59 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 1143.348181][T30421] overlayfs: './file0' not a directory 09:52:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xffffff0b) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "0000000300000000db82456fa79c812600"}) 09:52:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x4004556a, 0xff02) 09:52:00 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 09:52:00 executing program 2: r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000140)) 09:52:00 executing program 5: unshare(0x44000600) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) 09:52:00 executing program 4: clock_gettime(0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000000c0)={'syz', 0x1, 0xd}, &(0x7f0000000200)='R\tr0s\xac\x84cusgrVex:DeXy\x13\x12 =\xe0A(\xc8\x17~\xee\x87\xd4\xd7i\x0fH\x10\xe5\x14U\xf1E\x7f\xea:X\xaf\xe1\x11\xcb\ftuo\xba\x1f\xd8xx\xf7\xca\x04\x1a\xd3\x84%4?R\xcc\'lr\x9d\x05R\x0e', 0x0) [ 1143.915081][T30458] IPVS: ftp: loaded support on port[0] = 21 09:52:00 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(r2, 0x200004) dup(0xffffffffffffffff) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:52:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000007c0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000000c40)=""/90, 0x5a}, {&(0x7f0000000580)=""/125, 0x7d}, {&(0x7f0000000d40)=""/85, 0x55}], 0x4, &(0x7f00000002c0)=""/61, 0x3d}, 0x10000}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, &(0x7f0000001080)=[{&(0x7f00000004c0)=""/160, 0xa0}, {&(0x7f0000000cc0)=""/96, 0x60}, {0x0}, {&(0x7f0000000300)=""/164, 0xa4}], 0x4}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/17, 0x11}, 0x3}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x4840) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x100000000, 0x2000002, 0x0, 0x0, 0xe8}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1144.053650][T30458] lo speed is unknown, defaulting to 1000 09:52:00 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 09:52:00 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 09:52:00 executing program 0: fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigsuspend(&(0x7f0000000300)={[0xfffffffffffffffc]}, 0x8) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) socket$inet6(0xa, 0x3, 0x87) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') 09:52:00 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) creat(0x0, 0x0) 09:52:01 executing program 2: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @multicast1}, {0x6, @multicast}, 0x40, {0x2, 0x4e24, @broadcast}, 'veth0_to_hsr\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x10002, 0x0, 0x0) io_setup(0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a", 0x3, 0x11, 0x0, 0x0) [ 1144.694494][T30464] IPVS: ftp: loaded support on port[0] = 21 [ 1144.919691][T30464] lo speed is unknown, defaulting to 1000 09:52:01 executing program 1: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000555000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 09:52:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x7f, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805, 0x0) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 09:52:01 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) creat(0x0, 0x0) [ 1145.541717][T30514] blk_update_request: I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 09:52:02 executing program 5: unshare(0x44000600) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) [ 1146.355084][ T7] tipc: TX() has been purged, node left! [ 1146.364457][ T7] tipc: TX() has been purged, node left! [ 1146.380390][ T7] tipc: TX() has been purged, node left! [ 1146.395060][ T7] tipc: TX() has been purged, node left! [ 1146.406436][ T7] tipc: TX() has been purged, node left! [ 1146.416788][ T7] tipc: TX() has been purged, node left! [ 1146.435295][ T7] tipc: TX() has been purged, node left! [ 1146.449405][T30578] IPVS: ftp: loaded support on port[0] = 21 [ 1146.493764][T30578] lo speed is unknown, defaulting to 1000 09:52:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x15], 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x24c20082, r4}) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x1e34a95995e) 09:52:03 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0xdb, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() read$char_usb(r2, &(0x7f00000001c0)=""/157, 0x9d) tkill(r5, 0x25) 09:52:03 executing program 1: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:52:03 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000200000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014d1c48f00000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000001"], 0x119) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040), 0xc) 09:52:03 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r5 = dup(r4) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) creat(0x0, 0x0) [ 1146.957171][T16343] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1146.990721][T16343] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 09:52:03 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@local, @broadcast}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x4d3, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40000000, 0x0, 0x0, 0x6, 0x0, 0x3}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xfc) [ 1147.005856][T30596] ptrace attach of "/root/syz-executor.0"[30593] was attempted by "/root/syz-executor.0"[30596] 09:52:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x3f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x9, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x6, @string={0x6, 0x3, "9cd92ab9"}}, 0x0, 0x0}, 0x0) [ 1147.083082][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1147.083097][ T28] audit: type=1804 audit(1599472323.463:727): pid=30603 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/987/bus" dev="sda1" ino=16375 res=1 errno=0 09:52:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000080)) nanosleep(0x0, &(0x7f0000000140)) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1, 0xd}, 0x0, 0x0) 09:52:03 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xd7fb668d8760ddd0, 0x0, 0x0}, 0x20) 09:52:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80803, 0x88) connect$inet6(r2, &(0x7f00000000c0), 0x1c) 09:52:03 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="72617755a6f768000000000000000000000000000000000000000000000000000200000003000000d80100009800000000000000980000009800d95e162d5e9560a60000400100004001000040010000400100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000040000000000000007000a80000000000000000000000000000000000000000003800534554000000000000000001000000000000000000000000000000000003ffff0000ffff0000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000600002000000000000000000000002800000000000000000000000000550000000000000000000000000000000000feffffff"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x23) wait4(0x0, 0x0, 0x0, 0x0) 09:52:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x5) write$tun(r0, &(0x7f0000000140)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @local}, {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0x62) 09:52:03 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3e) tkill(r0, 0x34) ptrace$cont(0x20, r0, 0x0, 0x7) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1147.500815][T28225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1147.534972][T30647] ptrace attach of "/root/syz-executor.5"[30646] was attempted by "/root/syz-executor.5"[30647] 09:52:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0), 0xf}}, 0x0, 0xfffeffffffffffff, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getxattr(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="77a18680df07aec10100000000000000cafae0e6b27dd9cfb41c7851060054a8aee79c5037174a3270e7ff570e14a510bbe39b8775e8c87ec4dfae39e2f5e710c00e31d70b91eacf180c3e59b80be0691287d544fbdec4b58431ed3f41e964abb7f0de490aff4380571a393aaf097a69db9c5f3d17d4309838183ba75527ac550917e4f53f7ba5a90526ce1773583de7e377295bef6cdaa85e24ecb049b0fc7e665340e4b001da174a535cb16f"], 0x0, 0x0) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000484) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x2) 09:52:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000001e001df6ff00000000000000ac1414aa0000000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000240009"], 0x64}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0xf1, 0x0) [ 1147.646909][T30657] ptrace attach of "/root/syz-executor.5"[30656] was attempted by "/root/syz-executor.5"[30657] [ 1147.697561][T30652] infiniband syz2: set active [ 1147.703314][T30652] infiniband syz2: set active [ 1147.750218][T28225] usb 3-1: Using ep0 maxpacket: 16 [ 1147.757856][T30652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1147.768090][T30652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:52:04 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x40000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 1147.789808][T30652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1147.809106][T16343] lo speed is unknown, defaulting to 1000 09:52:04 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9, 0x0, 0x0, 0xffffffff80000001}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x8, 0x1}, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) write$input_event(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x2710}, 0x4, 0x0, 0x4}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 1147.870915][T28225] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1147.891330][T30668] ptrace attach of "/root/syz-executor.0"[30665] was attempted by "/root/syz-executor.0"[30668] [ 1147.903284][T28177] lo speed is unknown, defaulting to 1000 [ 1147.978356][T30658] infiniband syz2: set active 09:52:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) poll(&(0x7f0000000080)=[{r2}, {r1}], 0x2, 0x0) [ 1148.009105][T30658] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1148.070857][T28225] usb 3-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.40 [ 1148.083097][T30658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1148.112961][T28225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.153176][T30575] lo speed is unknown, defaulting to 1000 [ 1148.159107][T28225] usb 3-1: Product: syz [ 1148.222579][T30672] IPVS: ftp: loaded support on port[0] = 21 [ 1148.230484][T28225] usb 3-1: Manufacturer: syz [ 1148.235101][T28225] usb 3-1: SerialNumber: syz [ 1148.285930][T28225] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1148.505795][T30672] lo speed is unknown, defaulting to 1000 [ 1148.799335][T30695] IPVS: ftp: loaded support on port[0] = 21 [ 1150.130619][T30695] lo speed is unknown, defaulting to 1000 09:52:06 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x20) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="9be7974865753876c63ab5564eeb6ae896d6cb08816df0113a2455b590002e74e1a907f1f7fff93566493702005e4646796ea9dfcc3a01d4"], 0x65) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 09:52:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000017000101000000000000000004000000040010"], 0x18}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close(r1) 09:52:06 executing program 4: clone(0x6100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x60000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) 09:52:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) 09:52:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x23, 0x66, 0x1}, 0x24}}, 0x0) [ 1150.204339][T30575] usb 3-1: USB disconnect, device number 3 09:52:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r2, 0x89a2, &(0x7f00000000c0)) [ 1150.361192][T30722] ptrace attach of "/root/syz-executor.4"[30719] was attempted by "/root/syz-executor.4"[30722] 09:52:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6174004c640ac0006c00000268d400000000000000f1ff911e249e01000000000000000500000090030000000000007000fa001802040000f00000edfffffff8020000f8020008b524e9fff80700000002000005000000", @ANYRES64, @ANYBLOB="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"], 0x3) 09:52:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ptrace$getenv(0x4201, 0x0, 0x3, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002340)={0x0, 0x0, "9943c2674e0c960db5304e31e802044ed3f4690dbb8180653ebbdacd8b7c73f3fa3a819055c423ceef7abdef23a3d9fa05cd314b4089e0ffb51d348558b8d34c5067154432bed8b9d3618643fd13ec591f920f648ea904cf0881b01334e21a56750d5afa760b9123b5417bcce9c8e87aae58c3fc376c9190b95a72559e701ccdae61903c3ecb1fe750ad34e01203661fb2595e366cadf7a45588ef00d58027590d5c6651c870e3f0abf340b35443ab44107db179b2c62af46f4d8d896e74ce25c82da5698cf663c86c03f9f2c493afcf5c0f247e2273a530c0c87c5650850b36cc5f81c4cbe1d2c2bbefd47a85a3ee223cfb4cbfb28f6c12d1001be31d108d06", "a496d0a77e08bc876f39dac10152831e131cc2ea6d9028f55b0be3a4361b09d89ec2b3c3c4850bfe0b81cb3099208caffe1cfb1c10df9d402da7be503e458425efbe61f588846f21bd940b73e015f77b327a29bb1b9391416fda2bc89bd4375f9576f37de394950a024a55195f3b5190a2d228b2ee5b6b498b61daa37b6263228789865e548304899b53b6cf762e50406d28ca4517b468780cbd3ef0fcf9effe494ba8af7e7037beb95b6983a8bebd88c634f2c2680598984e26e806c29743ddd6a46f57c5db6ebe7daec04fcae2979775d81769a9c25069fbd21fe2f06d346c8e7e7fc4abb15c1e6233b07f323c75561820227223286cd2f43c173ee9a098a45a75770b23fcd203ea2a2e913eed706740b3a9ca7b2f556b17650eee947440acab73611fdcbc32b7c0f3ffee198e0e788fbfada4cd3c8a8e506526f0bc0750e4cb91363c761bcebb8d5eac0c4f406080ed9f6ec9f24627955e32fb750c23d75ec93f1037714be2c22972de7a9c8f3d441b17f658bb9f6e62967fbe491399bde1e667f5f7a169195a6c2f3bd5a94893ae631069861472b88ae153270320de4494732b018319783bab7620a9980f8e09548cf25078b800214af39b76c0f9b519b7fed1c61677a9816581170e62b41b5a40144236ff101f4dc35cedca8dfd2b72d4d541f8feb956f7307bff393f954acb6bd83b75231933a15cf3e35a0a8c8ea2c71f8804121e1769202637e85b4f67511257209f6b7b708a5c725ef9545a6b92d9f4361671377e284830aa14de4aa498becf1f1991e0a539880846fe35bb7910d3437191705fbc110413f353482cb75310965bfe480e7637b2d89debb28929e00517be47ecd2afcd96cf38f4fcc89042eb7b8b297ec89a413dcd0d171595a567dc07cedabbdec79d79e461af576a9f49bcfde28305d73faa46022b80791a2d6e836cc406f10b8393751eedc707181759760e9de71d17aab9ab86a1e9456c47ee9eca7f70330c4d0b239549b5d6fc4a46bb8a2684b472e3f30dc75cba8ac5173ee1c99ba18a8315a8e91712bd41bc4e6cdffc9f870fb321cf03edbaef3539844915b680ebf49350f25bb85d6702c9491669fb114b6c18b6b0b7460f3dabf2924428b6c7786447e92f070a33aec336f10308b20b9fc03387e8231a4f8d054b7f10263d4ee3c4433cc39bbbb9c6307130cf29f466e4b599cb8f05412a323de9c55cae850e672145e17a21dd072f2aa0fa9120b9c089c21c271ae5fbde278871093ded5edcab063afb510131ccfc31a4a41ef79bb572a7f86855eedf0a516c5fbb84154e341ef921a6fa37a4ae38d0ba7bad5b23db8ef8383219f2a71a63d42bf07523b51fd55968f96ce31d651c85d4aa8b09b5c1d82cd37ab0a1a25493c970ba2b2c227f1d251e8b3e603c023163d258c6a1f23222b5fd3b9f8a3d3e15dd2000e2df0bfd23a087eecd45239753ffc342d9d60807f8a4f5b49be6f72f1d60b8e201143bc128c316991b32ce5571f2c64cd2596bedc6898495ad8bf5d5c0acefa8c5d849aa0958162ab76423538f225017eae862b372fcf8e599b77f16c352bf14f8eeb2f87802cd02ecb63d2a8581a43ad7b4cf2479e292cf3eed80d65b899632d48557d031c04144704b8f10bc722d09c80c0d786d8bab73845a483001b7aab57861682d25d1640a6d69e133537e24b2cb1b714c7c2d6f5958d2d59061c2f99a80c51a6ac760a705c9e82b9b172b646ddbf0aedf9d9df3aa3739f0357ab22b3c8693d7907cb7f371f4940352acfd69b976290ea585f565c8d1408cbc7b4b9140dc3365f9242d3991b1be7805462df57977f17df21a3a4a419953e70cdcbf46b2e1a456783b05f100d83130ac0519aafe9e8b3bbf769aa60aa7e28e89df370a042e9bf40c784a9e2d7fc49db3177dfa5b87c278d0b9bd7ae52ea41e1289c8a79a2ca1694ea7064dea405214e6188d9cd67df400fd6591b87db932c57bd57713e8638e7b4789c1ccc1d749202e9a917b993a8690f690654729688a9a1d1608f13d2f055bf03cb1c86e0f40130e6173e779de6cc84ce2bf9df30faf9314703c4480615129d86ec10eea7a35da05ba01bc8abb3a85a32de488c2eac5c652248834a15b3acd5ae5d89945ac6806ed661f574933214949377520495fd39f54bf0bb9edcfc45d2d9fa79b5f0075efc48d35c73f9cff0ef3f15c60528359d8dbda711e6b9d2d10524c8333b724b7b80392b169d2bb97652fa40e7fa1a27b86c37675d4d62bc00b59e59525e56ae3e5c0edb18fd0a621ce16c275863eb8bd02b391377edc3b92bf9b7041ac472b523b71114d0a817135a862f29cbbe9d137813146d06f9deab8b528c17b2bd4b08887376d9cc4e642ce7b42d00d57794dcc1ee1da8939407284309a4fa690ff8d8bde2a406720dc2692b8ceed359661258e56d7612088e0689065414fb0c189a94dd9199515771c343175a3bb00914dd7fa0c358e51349010120ab7646f28f80d7ad583c55291fdae69b23ae6914c1d9ff49908a410d4cfab9c4e6f1b9b7f8db24106f3d3e3be84094010da5b0f00f332d505508686d04804b76ad6549962293baef5ef063fdff95b4c0caef03f2e6bf115ec33b6beedf0659327e2e6987f7436a5ce32c1df2f4aff3a66904e4a5ef725f7a0600b7ef26c040c1af344fb0637fd30c248e186b1f5ceb985dad5bb82459b125f183158ffec25c7ade367e39d941a01e4874bf1cf0e2926782cc26885d2b73e11676e77a0f28236dbf48c6f3bd63eeb7f365ed5e5c102ea54e958ca8cbfa4ac9e68f2e8014d7d8fe060d43b1fd6b43a756f64fdf606d4688ecad2082d7bbb6ec8af90a9fedaaaaf78ff6587c26896f829a6c709ea6f16a1099a1cac999183a897ec8cb68fc1020959efecaf005b5eb203fa7b8c8ab23c74e8312eb88e8f3d4655772f17631fd533197f9b6af97a290cdac05242118b82895a98badc5b4cee02011a783be03b3429a6f2868984dad3f70252520d082111aedd5e5806e2de47d5fa8d3d7acdfe0f5d680537e9a95e6d14bb2d96d3bd8e6b13ff0c50a44e8990d60b9cbafff14e22de0bd25e0973a7fd5416f2c99b2aba838bf652f2e7853f0fa1c45afc1fc8face347f5dc2e84df0b69cfefe18fe484714514d9d6912adf393409e106dddb22154c285c52a0411b711e01eb0b5fd69728226f1d2fd9024f00e366cbb3fd49be1bf8a905045fddcdd0343a5354b559040a926f2490dbc010f35b4d9042f014a5cf3463b5941adab271d61d2d853ad93b654bbd74724821026eab48a641a046cf243a1b538e1ef4238dc175feb8da73498504bd6d57f2cb7d1753642691286d3229e8c40bf07e3d469c7c486c66c09398fa4e7648d84d3a723ce6cffa66326ddb4bd601df8fad79494204ec8cd70fbffd63f1f37c31437dddc34736542b4671bc145d6e953a5b2ce8a3885c612db9af94d9a2f8dfb118c7464bce987ccb0b68b904daa6eddeb725bbce5ddd385392c6ac83435c5cda720e072e756fd0a7d0a6a4d532e449299704aab23568980971fd280dada9d5b80ad49adca70f84f08b4e98f3a300a59b69a243ff2f2bdb7ad0ee2c50837b653b8cbd0931c15aa13adec481277841a7eb848933ffab4eb38d915c24c4748309323cd6c4fd3bccac4c054fa1045341bac824459c5605f23ef62110a405bd26b87400f6bfea7a5c6f0958b81de48c94b3c5c42954dc99fdc0a73fcf6e9c3a8265d6ba07557115fb0127dfccb3b98fed7503c842e05d6d2677b33edd91928a6924cb18966d1db75c6f8e5d41ad509599ed32d0eb207e90f33b885c6f39d4ba06ea43000ffbd8c399f3e4ebcd52e76412214859567485bbf3cdadab8d89d3e2a09c6e4cd51a391df6b1000062a79259c3bfcb7517e4d87a38493de3a99d660533b9536e8f9da812ff3437f886ef55ee5acfb65f3544601e162c1eb336f6c1a3182fc403cda33e0b64dbad77509b1f98794783c05bb86301b13c311f6335c63c4228491663b268099c559158b36170fcd0d5b9735857d2ff16c7fc12ac77d363707183ca63568fbcc1b63c3fdf3c9caec22b1851ced6f424cda124525cb2b053a1358f85e52ca02a2a30c0bbd59ea30fe01670a16c792b9e33703bf10b21ff77046fcd34dab19b96036817f9fe01dbbddde743bf3c143e83a61539f196d6b21e02e1e00e4df283d2c79463f58e891298b5f76880469c78112ff0b48874c7a15dacea6e72cb936b55b669f01b76c95fe5c23049d786271f25aaddb0bffdd6a995c604f34942eb3c0ede639fbf9fcdeac4aa7e048057231604741cfdd79d60825ece1bd88da58113089ad137876c3bc17880e6d6e9cf8c011b33c86e6413e3ee7be553c981c78a3dd2d2690ce7c43868ba857bcf4db125f7d09195d78e70b10f1ac298d08e1e250ee27417533aab901ad4190beb360e6275bb884c972a6c3fb00813fda7d55b00a84ec6088fe8d3843b020b9cca08b9d4d7feddb7d22cd0aa1326092253576669b4f83a8f858ba20f754131cc8402d120b79dd4f98938adf3bef27641e84a7f168e8af2af6df21f8b5356c1d8b619531a9c71a36ec423542ab3950e9cb17fd5b7b2632257c0713c3e579ed2b0a2b16328f081cd6998ddbd1943c90a8d48d044a3de7b95293b026d4e7c3382f8d5ee79b18c2f4a56bffee96477f1befd7e147c3ff6bff858f8cb3a84c4a47006653ef23b4d16c6488cb511402e7214ff33bbf3f8a9f7cc43d8d11bb63db22bb0c8e1769ff4762c104cb6752a3d9c63d8ea4eeb6938e704d99e6e6dd6af69ea88e815c28e43151e92ca8a217d433303dd1fa8e94c6dea8725b3f7b58bc8395fa7cdf39dce02598b0727e32ea9c08d2a54b33dcb21de64446f00958e4196e3fbb2a5abbf4958dbc026a221f37572f5b2c596f76950dd8944013968753aa2711d9ea3b711634b5c3c16f1cab4cfef049c515e9b35f344c6b2741aa9c1f72aa3bb8f3e1df90145e5e36e48cb933ba55bfe9fe57d62febf03e9e56396df88c711a05e4c84f473377480cf2ad1d92f5c8f2572f723e0fd9443b3ae5c4e87fc0d3df9177db4b0f44116a0bcd17d82ebe2718ede8930d25d80f370c663f38e6125e0a25ec6c9d3132e44d58cf3c6b7b54c03b72f0a1bdca2aed2d9bbcfdc746feee80a78593172016dacf3f2b13bcef0257d75c3168d96e586edf6462a36c5f2e5d429eac6df24ea57a1b2f599d7db93f7bd9d2929857ddb90d4c287feec2b976445f8f9927453b2f2700a2bfd81568d6c697cdc40b3d0be2bdcf313614dc21e598bf1adfb9569df0c65c5eb2ba5983542b67eb563feb7c9a21164bc0fd55eefc1fa91565a18701de2127e9490fb53e51d23d61ed6a487bdf9807568e9fadb187ce72882a2b6ae1a8c93fd732e018a9e7b4d6"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bbc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xbe, "cbab7ffcace4a6"}) syz_io_uring_setup(0x2fac, &(0x7f00000002c0)={0x0, 0xa224, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983ab800, 0x103}, 0x6800}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) dup(0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf25070000004c0006804800040067636d28616573290000000000000000000000000000000000000000000000002000000057eaf024a484103516fd0abe07f92be6676f8e6478fbbe2de18888fbf073f84870000180080003000100000008000300000000000d0001007560703a73797a32000000004400040020000100000000000000000000000100000100000100200002000a004e2200007ffffe80000000000000000000000000001f0900000008000300ff07000059d44ba43fdca38894f7c433f7ba5ee16ef5ff65efe50f2be4e7f4756855c6d2542160302bd9aaba7774909a81d26ea82ebec5e6e07224"], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x49081) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 09:52:06 executing program 4: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x7c, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x20000000}]}]}, 0x7c}}, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000240)="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", 0x106}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1150.578044][T30727] xt_nat: multiple ranges no longer supported [ 1150.673163][T30739] xt_nat: multiple ranges no longer supported [ 1150.728073][T30743] ptrace attach of "/root/syz-executor.4"[30742] was attempted by "/root/syz-executor.4"[30743] [ 1158.221876][ T7] tipc: TX() has been purged, node left! [ 1158.228085][ T7] tipc: TX() has been purged, node left! 09:52:19 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c567cf4f0cc7c9cdc05b7164bca1b1ad5"], 0x2}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x25) 09:52:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/98, 0x62}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x35) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) ioctl$KDENABIO(r2, 0x4b36) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000380)}, 0x8000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1a008, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000001ff}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x2, 0x0, 0xfffffffffffffffb) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x200, 0x81, 0x9}) keyctl$update(0x2, r4, &(0x7f00000003c0), 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00e3962395477957b218e1f887124ca52c3cbc298096f146578aa433c1de6f3241cd3d66c9bbdee6512f2117d38fb87484670c5035215f72e07c83a3d1160018c622c37282a72e1e9c8477164b55eb562ae3335eae09a1f378e93d5f810002f18873977ce475b3c8d8af611c3152dac24ba5d671552c0c7c02376b36069fa604f197d0cad277bcfe14c62890d80e0a10845b8ee7958c5aaee485a449f29c717765a83389f69a57ca58e1f68826446074d35d394f72bbbc8c3ce0"]) 09:52:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0x6, 0x209e20, 0x2}, 0x40) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000000), &(0x7f0000000440)=""/130}, 0x20) 09:52:19 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x241, 0x0, 0xffffffffffffff37) 09:52:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) chdir(0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_config_ext={0xffffffffffffffa1, 0x5}, 0x8940}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0x0, 0x0}) bind$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xcf) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000080)={&(0x7f0000000140)="1bd4875bbc949502ddcdb36dcecd317ab2ab9a8029054b4b1e36df55067f8bd248c9d88af8330f8fe33333ea460047488fa11609b311f212e5b6555d180e8b1150bb948506", 0x45}) close(r3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:52:19 executing program 2: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000000c0)="a16577b5ce1ba5c0d815b82286c54c7826850e24a76d95104b094f8673029ce1330f0ae136967bb713eedd47169946032c619fb7e8a75fb6f7601d550ee73f72f704ce7cf0", 0x45) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x10, 0x14, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x38}}, 0x0) 09:52:19 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x39}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) [ 1163.496288][T30822] ð: renamed from sit1 09:52:20 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0) unshare(0x400) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) pwritev(r1, 0x0, 0x0, 0x0, 0x0) [ 1163.614556][T30833] fuse: Bad value for 'fd' 09:52:20 executing program 1: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xd56) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xfc) 09:52:20 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x2000000001c, 0x0) read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) write$binfmt_elf64(r1, 0x0, 0x0) 09:52:20 executing program 0: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000140)={0x14, 0x0, 0x1}, 0x23) 09:52:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x17, 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x8000, 0x4) 09:52:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 09:52:20 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_subtree(r2, 0x0, 0x21) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2f) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) ioctl$CHAR_RAW_SECDISCARD(r0, 0x4c07, 0x0) [ 1164.037530][T30863] input: syz1 as /devices/virtual/input/input11 [ 1164.143773][T30879] input: syz1 as /devices/virtual/input/input12 09:52:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@union={0x0, 0x5, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}]}, @struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x5b}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 09:52:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x66, &(0x7f0000000000), 0x4) [ 1164.410145][T30904] ptrace attach of "/root/syz-executor.4"[30903] was attempted by "/root/syz-executor.4"[30904] 09:52:20 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000204740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000180)="900000001c001f4d154a817393278bff0a0ba578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 09:52:20 executing program 3: r0 = socket(0x18, 0x0, 0x2) readv(r0, &(0x7f0000000080)=[{&(0x7f0000003700)=""/139, 0x8b}], 0x1) 09:52:20 executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x3a7}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000080)=""/21}, 0x20) 09:52:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000ac0)=@ax25={{0x3, @rose}, [@netrom, @netrom, @bcast, @bcast, @null, @default, @remote, @bcast]}, 0x80, 0x0}, 0x5}, {{&(0x7f0000000700)=@x25={0x9, @remote}, 0x80, &(0x7f0000001080)}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/44, 0x2c}, {&(0x7f0000000c00)=""/59, 0x3b}], 0x2}}], 0x4, 0x22, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x7d}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x100000000, 0x0, 0x0, 0x0, 0xe7}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(r3, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1164.636364][T30917] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1164.647703][T30917] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.5'. 09:52:21 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) ftruncate(r0, 0x2008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') pread64(r1, &(0x7f0000032240)=""/102400, 0x7ffff000, 0x0) 09:52:21 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000200)) memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) pidfd_open(r1, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 09:52:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010001fff0800"/20, @ANYRES32, @ANYBLOB="000000e1ffffff001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010001fff0800"/20, @ANYRES32, @ANYBLOB="000000e1ffffff001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x38}}, 0x0) 09:52:21 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x2601, 0x0) 09:52:21 executing program 3: r0 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)="d2e6e5", 0x3}, {&(0x7f0000000300)="ea", 0x1}], 0x2}, 0x4008042) 09:52:21 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffebf}]) 09:52:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f00000012c0), 0x4) [ 1164.848473][ T28] audit: type=1800 audit(1599472341.234:728): pid=30935 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16368 res=0 errno=0 09:52:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2100000000}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000100)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') preadv(r2, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 1164.912610][ T28] audit: type=1800 audit(1599472341.244:729): pid=30935 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16368 res=0 errno=0 09:52:21 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000abaff9)={0x77359400}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f00000002c0)={0xfffffffffffffff8, 0x48, [], 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl(0xffffffffffffffff, 0x6, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x40004) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6c, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000140)={0x0, 0x100000, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) pipe2(&(0x7f0000000100), 0x4000) sync() socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) 09:52:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x49, 0x0, 0x0) 09:52:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_REMOTE={0x8, 0x5, @dev}]}}}]}, 0x40}}, 0x0) 09:52:21 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf5ec29954197b5564e6ac851909cf99421f46b04fff0c935433e6691f8b25bee7df03b08db40ba73ac381dd4dea5dac863b5e2e3300bbd04055fff98a5c92c4b0b0deb44d872aa7bb025d0118d0e12363949f0f52917f95dc079f7c82a8e9eb1c1c840ec3dc93d87be6f6ed2195e8083b0c00ade4a74bd32932f9671a6ec9642e8a4fb6f987dbfeb3ffa2bee790", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 09:52:21 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000100005070800"/20, @ANYRES32=r3, @ANYBLOB="01ef0016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x534}}, {{&(0x7f0000000540)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x2, 0x0) 09:52:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)={0x10, 0x3f0}, 0x10}], 0x1}, 0x0) 09:52:21 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_MASTER={0x8}]}, 0x30}}, 0x0) [ 1165.502455][T30975] ptrace attach of "/root/syz-executor.2"[30974] was attempted by "/root/syz-executor.2"[30975] [ 1165.638105][T30982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=30982 comm=syz-executor.4 [ 1165.662987][T30984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:52:22 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x775409470d9a3699}) [ 1165.739892][T30988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:52:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x5, 0x1, 0x30}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2e], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 09:52:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000100)={0x39, 0x96}) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x0, 0x0, 0x148, 0x360, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0xf203, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x74}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) setsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f00000003c0)="bdbe913ced7f9d1034c047b7789748a04ec1de41fa697b37741fc10de13501885c80c4d768d6c797cfd281ae72cd4e10824b9c7f611aaf885575f03ee50a26050a435b8d7935c37795530a0904747e85af90ff8bb54b25dc08367a20b1703977ac694698b6ad8a0faddf48cd7afdf9956d3d63771f3e83c5e7ba386ca6c8a293fe37279a5444395b404b6b6d3a65848f5e1b94d210773e749af6b6781b32f94b497ebf67baf1d858dbd6892958b9005683ba1fc4d72527ad53e800ab02edc4c2854fb5e7af151932abe98ed4020cbcdcbb9d3a2658b13c3f", 0xd8) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, 0x6, 0x8e2f}, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000340)={0xc0bc, 0x1000, 0x800, 0x0, 0x0, 0xd6f, 0x8, 0x2000000200}, &(0x7f0000000040)={0x7f, 0x6d7, 0x7d, 0x80000001, 0x801, 0x8, 0x8, 0x5}, &(0x7f0000000080)={0x7fff, 0x1, 0xffffffffffffff7f, 0x0, 0x4, 0x100, 0x7, 0x1}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x5, 0x37b, &(0x7f0000000180)={[0x19]}, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1d0}}, 0x8000) 09:52:22 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000abaff9)={0x77359400}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f00000002c0)={0xfffffffffffffff8, 0x48, [], 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl(0xffffffffffffffff, 0x6, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x40004) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6c, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) modify_ldt$write2(0x11, &(0x7f0000000140)={0x0, 0x100000, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) pipe2(&(0x7f0000000100), 0x4000) sync() socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) 09:52:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x4, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) dup2(r0, r2) 09:52:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() gettid() sendmsg$unix(r1, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x20}, 0x0) 09:52:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4a, 0x0, 0x0) 09:52:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) 09:52:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x41, 0x0, &(0x7f0000000100)) 09:52:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0x12c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 09:52:22 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000001780)=""/231, 0xe7}, {0x0}], 0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) 09:52:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) bpf$BPF_PROG_DETACH(0x14, 0x0, 0x0) 09:52:22 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f00000002c0)={0x2, 0x12, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@empty, @in=@multicast1}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local}]}, 0x60}}, 0x0) [ 1166.203209][T31021] ptrace attach of "/root/syz-executor.4"[31015] was attempted by "/root/syz-executor.4"[31021] 09:52:22 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x43, 0x0}) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x25) [ 1166.330347][T31037] ptrace attach of "/root/syz-executor.1"[31036] was attempted by "/root/syz-executor.1"[31037] [ 1166.361708][T31039] xt_bpf: check failed: parse error [ 1166.434212][T31042] IPVS: ftp: loaded support on port[0] = 21 [ 1166.479654][T31042] lo speed is unknown, defaulting to 1000 09:52:23 executing program 5: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) unshare(0x44000600) ioctl$BLKPG(r0, 0x4c02, 0x0) 09:52:23 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) quotactl(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 09:52:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x20004000, &(0x7f0000000280)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x80) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(r1, &(0x7f0000000080)={[0x8001]}, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) 09:52:23 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022a19b000f338884fbbb07cfb0169d210fe0b9c4e341fd03d27c12680affc7cca744c7975f94594e3cf774196781960fb71d9dea824024ce7991548d80ca9efb63cdbec5", 0x88}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:52:23 executing program 1: mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000003740)=""/102400, 0x19000}], 0x2, &(0x7f0000002600)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/137, 0x89}, {0x0}], 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0xfff, 0x3, &(0x7f0000001640)=[{0x0, 0x0, 0x6}, {&(0x7f0000001580), 0x0, 0x8}, {&(0x7f00000003c0)="a157d595991524d4a34bb4fc879eaded229545992b0030892a1bbcc2203b59f8425fa85ba674f1cfba60abd852f0cd4eb3c8bcabc85203f2b6ee8fc9ee0050fcde550141dc2b5d03485e9cf8274c388c61d915bb5f65e135f1a67ef1408c86a4cd1fb43be3f466367a", 0x69}], 0x6c000, &(0x7f00000016c0)={[], [{@dont_hash='dont_hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'mountinfo\x00'}}]}) write$binfmt_elf64(r2, &(0x7f0000001780)={{0x7f, 0x45, 0x4c, 0x46, 0x55, 0xbb, 0x0, 0x0, 0x1f, 0x3, 0x6, 0x0, 0x1cf, 0x40, 0x2f6, 0x0, 0x4, 0x38, 0x2, 0x8, 0xb50d}, [{0x6, 0x4, 0x0, 0x6, 0x2, 0x8, 0x9}], "f4cef1a97aecffcb81e5853c8c2770c808cc3455aca42ba8a180a8c65a5c0c1d0e0079008d4d4bb80432dae706b444873260c14f9f74a9d99ceaecb6d6501232b0492ff7eafcc15ba27a760abeeda27c365f8315a18009ede822f352241a18f30f2bbfefea2d96c64fc54a6ca5b03106a962ae1e29332b"}, 0xef) dup(0xffffffffffffffff) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000001900)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa4, &(0x7f00000002c0)=""/164, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3}, 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 09:52:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) write$tun(r0, &(0x7f0000000680)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "a5c268", 0x1298, 0x3a, 0xff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, [{0x5, 0x19, "e5fb000005005357cd99e33bca98e246dc9027eb3334ea443e7fdc4049b892d54090878bee496aa11e07fb0f1db1a0ebe2f95347b0317613063381165c01f08fea1048ea59a6f2273e02707fdd7defc02bde3192360593169594710bddd04aead6c89c87778555de42d23236534ba1a799a63eb4532003a703b249e4628e4706bccc7a264ee85014d99a7fd4565d3c416c835a741eb4e97140e834013724d23450072f0087ac65295ca0d7c601c30de0161560e2d20c5b1052e9b208e25470e9fa884ecd2082ec38b3cb19c083"}, {0x0, 0x1b, "14a142ef59c04e8e7b4db5309006bd98ec79847a52ed68124e8a24d3079fc53b81c039a7d59f992dcb481043f510a0ce1ebb98c07a624ff8c8cc0b4fd3b8e700196d1f5696e184393de669ffaebfbd494a9d6a5fedac0738ffc3dcb3c1b96e48fd063786ae5701f6aa5022621e665607848e20f162630df96d0a773993e97ae6b847e51883d73d66bb30b4375229cfd0c9c41f511bfbf2bca94caa7ce76be257173a4eae2b484117ac32acf6ea1a32def26c919c93055c2f9a640b2d847d527357902538828abd66b3d1a9b85034066154f0b2ec054f6a8712ec98e5"}, {0x0, 0x1f, "8cf0833ae2772f05d302c778833be4f2b9c43c83284b82e71ca1ee382af46513079a2f52da08c93afdfc1a18e4b677b307a1c7df90787cbd143b129bc8dbc39104eb21674d26fd4ced8626df256869e168d42f4d160ad1442cae2bd8fda0fc44a08759d245bfe8eba42ec7967c1e953256a057369159333bca73b498a882fb5e840d429804169a6446c1d1b013144ae0ee276a463ef69ea4c4636751083041811c9b549256c6a3a71e451f8fd4de25629b3de61cba78315412fa14e350bb03feaf63909bd7320561df80bc77f36d4561a5efcc324450355ed398d9e46e798e23e2a4a2c787728b9c549a1894c53dcdfe834c7785fb3c4331"}, {0x0, 0x3, "6598975984c98199c07565e33783bc472344c2fc4e6a32"}, {0x0, 0x1f8, "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"}, {0x0, 0x1, "c3dc73ee76fa"}]}}}}}, 0x12ca) [ 1166.989795][ T230] tipc: TX() has been purged, node left! 09:52:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x101, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) 09:52:23 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe0000009058202", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x100, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) sendfile(r1, r2, 0x0, 0x1c542) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) [ 1167.079096][T31081] ptrace attach of "/root/syz-executor.0"[31077] was attempted by "/root/syz-executor.0"[31081] [ 1167.241535][T31095] IPVS: ftp: loaded support on port[0] = 21 [ 1167.404919][T31099] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1167.456242][T31100] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1167.458068][T28177] usb 3-1: new high-speed USB device number 4 using dummy_hcd 09:52:23 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x10840, 0x0) close(r0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000100)=0x20, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) write$input_event(r0, 0x0, 0x0) 09:52:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r1, 0x101, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) [ 1167.717909][T28177] usb 3-1: Using ep0 maxpacket: 8 [ 1167.773466][T31109] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1167.858667][T28177] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 09:52:24 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb323, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) [ 1167.912955][T28177] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 09:52:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1031fe, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78}, 0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x20004000, &(0x7f0000000280)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x80) r1 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = signalfd4(r1, &(0x7f0000000080)={[0x8001]}, 0x8, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) [ 1167.969098][T28177] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 2047, setting to 1024 [ 1168.000590][T31113] IPVS: ftp: loaded support on port[0] = 21 [ 1168.002904][T28177] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1168.033055][T28177] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1168.100339][T31113] lo speed is unknown, defaulting to 1000 [ 1168.128456][T28177] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1168.150446][T28177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1168.187194][T28177] usb 3-1: SerialNumber: syz [ 1168.211769][T28177] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1168.357803][T16343] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1168.607768][T16343] usb 1-1: Using ep0 maxpacket: 32 [ 1168.738427][T16343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.787721][T16343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.797565][T16343] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.40 [ 1168.848059][T16343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.926171][T16343] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1170.266635][T28175] usb 3-1: USB disconnect, device number 4 [ 1171.026489][T28175] usb 1-1: USB disconnect, device number 2 09:52:27 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) 09:52:27 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 09:52:27 executing program 3: getpid() sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x4}, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x6) r2 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) 09:52:27 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa, 0x1, 'bfifo\x00'}, {0x8}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x40}}, 0x0) 09:52:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0x3, 0x0) 09:52:27 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0/file0\x00') r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x1000081) [ 1171.389539][T31179] lo: Caught tx_queue_len zero misconfig 09:52:27 executing program 2: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000240)='./file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,index=on']) chdir(&(0x7f0000000080)='./file1\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) lseek(r0, 0x0, 0x0) 09:52:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r5, 0x1000) lseek(r5, 0x7, 0x2) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8400fffffffa) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 09:52:27 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair(0x9, 0x6, 0x7, &(0x7f0000000040)) r2 = signalfd(r1, &(0x7f0000000080)={[0x80000001]}, 0x8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) r4 = fsmount(r2, 0x0, 0x1) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)={0x964, 0x0, 0x5, 0x600, 0x0, 0x0, {0x7, 0x0, 0x4}, [{{0x254, 0x1, {{}, 0x1, 0x0, 0x0, 0x2, 0xb, 'syz1\x00', "d994997ad9d08a4a8d7f627b876eb89e4451738393d4c93de4739ca7aeb2cda1", "ddcbfa93ea10a5cfe2204625ddc1873192b959af1222f52e92e47e5a6b4fabf1", [{0x7fff, 0xd64, {0x3, 0x7fffffff}}, {0x9, 0x23, {0x2, 0x6}}, {0x2, 0x8001, {0x2, 0x3}}, {0x5, 0x3f, {0x1, 0x4}}, {0x20, 0x0, {0x2}}, {0x9d06, 0x6, {0x3, 0x7fffffff}}, {0x6, 0x80, {0x0, 0x98d8afb}}, {0x1, 0x4, {0x3, 0x8000}}, {0x0, 0x7, {0x2, 0x8001}}, {0x5, 0x0, {0x3, 0x6}}, {0x0, 0x2}, {0x5, 0x200, {0x1, 0x7}}, {0x800, 0x7, {0x1, 0x400}}, {0xff, 0x1ff, {0x1, 0x10001}}, {0x1, 0x7, {0x1, 0x8}}, {0xb7ac, 0x9769, {0x0, 0x1}}, {0x8, 0x1, {0x2, 0x9}}, {0x6, 0x3, {0x1, 0x8f}}, {0xfb0e, 0xe699, {0x0, 0x5}}, {0x43, 0x9, {0x0, 0x8}}, {0x200, 0x7, {0x2, 0xfff}}, {0x4e0, 0x4, {0x3, 0x9}}, {0x4, 0xcae, {0x3, 0xcb}}, {0x9, 0x4, {0x2, 0x4}}, {0x5, 0x8, {0x2, 0x8}}, {0x9, 0x9}, {0x0, 0xfff, {0x1, 0xf30000}}, {0x3, 0xfffd, {0x2}}, {0x3fb2, 0x5, {0x1, 0x6}}, {0x2, 0x6, {0x1, 0x80}}, {0x40, 0x100, {0x1, 0x9}}, {0x3, 0x81, {0x1, 0x1}}, {0x3, 0x7fff, {0x1}}, {0xfff, 0x0, {0x0, 0xb6b5}}, {0x4, 0x2, {0x0, 0x6}}, {0xec, 0x2b, {0x1, 0x100}}, {0x400, 0x1, {0x2}}, {0x1, 0x59d0, {0x3}}, {0x280, 0x7, {0x3, 0x1000}}, {0x5, 0x200, {0x1, 0x5ec}}]}}}, {{0x254, 0x1, {{0x1, 0x200}, 0x0, 0x9, 0x0, 0x0, 0xe, 'syz0\x00', "99d3e5d5d491a8e9df27be77350acac13fedb4bd62253f321ea8bc657cdeb174", "7df95a789e1c414c5be8689584d2768e8fc38a3c74670765d2e012192b0d23a5", [{0x4, 0x0, {0x0, 0x5}}, {0x3f, 0x0, {0x3}}, {0x3, 0x4, {0x1, 0x5f}}, {0xfa34, 0x3, {0x2, 0x9}}, {0x6, 0xb07, {0x3, 0xfffffffb}}, {0x6, 0x100, {0x0, 0x1}}, {0x4, 0x6, {0x3, 0x100}}, {0x3, 0xffe0, {0x1}}, {0x40, 0xe14, {0xdaa3c97c978b4ab2}}, {0x0, 0x0, {0x2, 0x6e7}}, {0x800, 0x0, {0x0, 0xfffffffa}}, {0x89a, 0x0, {0x0, 0x8}}, {0x8, 0x600, {0x0, 0x7ff}}, {0x1, 0xfff, {0x1, 0x2}}, {0x3f, 0x2, {0x0, 0x7}}, {0x0, 0xffff, {0x2}}, {0x3, 0x8}, {0x1000, 0x54, {0x3, 0x6}}, {0x1000, 0x2a, {0x1, 0xad5}}, {0x9, 0x102, {0x3, 0x3ff}}, {0x3, 0x9, {0x3, 0x7}}, {0x2, 0x3f, {0x0, 0xff}}, {0x20, 0x1c, {0x3, 0x8}}, {0x8000, 0x9}, {0xfc00, 0x4, {0x2a8f7886804966cd, 0x1}}, {0x5, 0x2, {0x0, 0x2}}, {0x9, 0xfffb, {0x2, 0x1000}}, {0x0, 0x9, {0x0, 0x80}}, {0x9, 0x7, {0x1, 0x7}}, {0x9, 0x2, {0x3, 0xf7}}, {0x8, 0x9, {0x3}}, {0x1, 0x181e, {0x1}}, {0x1c, 0x800}, {0x44, 0xfffe, {0x3, 0x3f}}, {0x7, 0x1}, {0x12, 0x7f, {0x3, 0x9}}, {0x2, 0x80, {0x3, 0x3}}, {0x1ff, 0xa0dc, {0x0, 0xc7}}, {0x40, 0x81, {0x0, 0x10000}}, {0x0, 0x0, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x3, 0x52533c23}, 0x0, 0x6, 0x0, 0x100, 0x0, 'syz0\x00', "59033caab22938f4334945041e9d87bf18784c26d9946a23eaa604e7af399110", "9d08671574ad64d0a4922b09111c8d5118b6b28f504fe7a59e3d8444a55dbf3d", [{0x0, 0x4, {0x0, 0x8}}, {0x1, 0x0, {0x2, 0x7}}, {0xbc12, 0x2, {0x3, 0x1f}}, {0x9, 0x1}, {0x2, 0xbb2, {0x3, 0x40}}, {0x7, 0x0, {0x0, 0x8001}}, {0x0, 0x0, {0x2, 0x6}}, {0x9, 0x9}, {0x7, 0x2, {0x3}}, {0x0, 0x1, {0x0, 0x2}}, {0x5, 0x7ff, {0x0, 0x5}}, {0x0, 0x7}, {0x400, 0x6, {0x0, 0xd6f0}}, {0x7fff, 0x7, {0x0, 0xffff}}, {0x0, 0x7fff, {0x0, 0x10000}}, {0x8, 0xffc0}, {0x8, 0x400, {0x3, 0x6}}, {0x8000, 0x0, {0x2}}, {0x401, 0x8000, {0x3, 0x4}}, {0x1ff, 0x3, {0x0, 0x3f}}, {0x390c, 0x2, {0x2, 0x7}}, {0x200, 0x0, {0x1}}, {0x1, 0x3, {0x2, 0x20}}, {0xffff, 0x8}, {0x800, 0x400, {0x2, 0x5}}, {0x212, 0x1, {0x2, 0x7fffffff}}, {0x0, 0x1f, {0x0, 0x1b86}}, {0x7, 0x5, {0x3, 0xc455}}, {0x401, 0x0, {0x1, 0xf815}}, {0x1, 0x6, {0x0, 0x1}}, {0x1, 0x7, {0x3, 0x3}}, {0x2, 0x3ff, {0x0, 0x100}}, {0x401, 0x7}, {0x7, 0x8001, {0x3, 0x4}}, {0x0, 0x0, {0x2, 0x2}}, {0x0, 0xc11, {0x0, 0x5}}, {0x0, 0x0, {0x0, 0x3}}, {0x1, 0x7, {0x3, 0xa73}}, {0x100, 0x0, {0x0, 0x40}}, {0x0, 0x1, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x0, 0x0, 0x7, 0x1000, 0x22, 'syz0\x00', "86800edd08fe534b78f5eeac98150c72addb3722c31db0a08dbfb44fe8d9fc20", "f0ca55244de5e65be9b4f436779b13db1b1f23ea4ef16ee3e4aeab04f6fbcc17", [{0x0, 0x0, {0x3, 0x5}}, {0x8000, 0x7, {0x0, 0x24000000}}, {0x17}, {0x9, 0x0, {0x2}}, {0x3, 0x845, {0x1, 0x1}}, {0x2fc, 0x2, {0x1}}, {0x3, 0x200, {0x2, 0x3}}, {0x1, 0xff24, {0x2, 0x481394a8}}, {0x8, 0x0, {0x1, 0x6}}, {0x5, 0x0, {0x0, 0x1}}, {0xfc00, 0xbb0, {0x0, 0x5}}, {0x6, 0x2, {0x2}}, {0x3f, 0x1000, {0x2, 0x9}}, {0x4, 0x0, {0x0, 0x4}}, {0x0, 0xb06, {0x0, 0x2}}, {0x1, 0x0, {0x1, 0x7}}, {0x0, 0x50, {0x1, 0x3}}, {0x6, 0x400, {0x0, 0x6}}, {0x0, 0x7, {0x3, 0x7fffffff}}, {0x0, 0xcd, {0x12adbc7a9f9de358, 0x5}}, {0x4, 0x7, {0x0, 0x1}}, {0x8001, 0x7, {0x1, 0x1}}, {0x6}, {0x2, 0x5, {0x0, 0x80000000}}, {0x0, 0x100}, {0x7f, 0x7, {0x0, 0xed7}}, {0x6, 0x0, {0x2}}, {0x4, 0x2, {0x3, 0x7fff}}, {0x2, 0x8001, {0x1, 0x5}}, {0xfbff, 0x3, {0x0, 0x1}}, {0x0, 0x2}, {0x7, 0xfff, {0x0, 0x2}}, {0x4, 0x0, {0x3, 0x8}}, {0x4, 0x0, {0x1, 0x1000}}, {0xfff, 0x0, {0x1, 0x3188}}, {0x7, 0x72b1, {0x1, 0x7}}, {0x0, 0x7f, {0x3, 0x2}}, {0x100, 0x0, {0x3, 0xffffb28e}}, {0x0, 0x2, {0x3, 0x10000}}, {0x8, 0x2, {0x1, 0x8}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x8000040}, 0x100c0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0xb5bab2ca266c1c7d, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}}, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 09:52:27 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x2) 09:52:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0910b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1171.725880][T31203] overlayfs: filesystem on './file1' not supported as upperdir [ 1171.745609][T31206] ptrace attach of "/root/syz-executor.1"[31204] was attempted by "/root/syz-executor.1"[31206] [ 1171.790317][ T28] audit: type=1804 audit(1599472348.175:730): pid=31210 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/981/bus" dev="sda1" ino=16320 res=1 errno=0 09:52:28 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='\xedr!QY\x88=Vx\xa1\xd1<\xdeb\x17\xd3zi\x1d5\x17\x85\x00\xd8\n\x9f\x11\xfa\t\x13]\f\xcbo\xc4X@\x06/\x96h\xef~M3\"\x00\x00', 0x0) write$eventfd(r0, &(0x7f0000000100), 0x8) writev(r0, &(0x7f0000001700)=[{&(0x7f0000000140)="229771f648bf49a61fc03d2a132223e450a196d1999d903b7baec659c3cd143eee4feb3e53afabc7f3118cffdd213c846d12f2f91bbc5867ae927341d0ea5c2624cfcd62", 0x44}, {&(0x7f0000000040)="9d12804ba2063ae14401a07d0a616808", 0x10}, {&(0x7f0000000200)="65569fde70d2b3d6fe368b0990a59fd126f8fcb4", 0x14}, {&(0x7f0000000240)="79be4ab86c74c0ccb87a04ffeca1c3e94eaf86aa", 0x14}], 0x4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x0, 0x0, &(0x7f0000000080)) 09:52:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/246, 0xf6}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x4, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) syz_open_procfs(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46000) lseek(0xffffffffffffffff, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x9) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0xc0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7e) [ 1172.145134][ T28] audit: type=1804 audit(1599472348.225:731): pid=31212 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/981/bus" dev="sda1" ino=16320 res=1 errno=0 [ 1172.170570][T28175] usb 6-1: new high-speed USB device number 6 using dummy_hcd 09:52:28 executing program 3: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000193c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x159, 0x159, 0x2, [@union, @datasec={0x0, 0xf, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], "7f"}, @struct={0x0, 0x4, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}]}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{}, {}, {}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}, @array]}}, 0x0, 0x176}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1172.447376][T28175] usb 6-1: Using ep0 maxpacket: 16 09:52:28 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) r1 = socket(0x1e, 0x1, 0x0) r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$tipc(r1, &(0x7f0000000000)=@name, 0x10) recvfrom$packet(r1, &(0x7f0000000240)=""/152, 0x98, 0x0, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x1c9c380}}, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100c2800000000000000000000000037515fa2c1ec28656aaa79bb94b44fe000000bc00020005000000140000270400117c22ebc20521400000d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd2000175e63fb8d38a8700"/252, 0xfc) dup3(r5, r1, 0x0) [ 1172.578787][T28175] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 09:52:29 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\v\x8b\x8a\xa9\x9fca\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b', 0x0) fremovexattr(r0, &(0x7f0000000180)=@random={'system.', 'posix_acl_access&)em1)\x00>\va\xac\xcf\xa5\xa9\x8a\xa2\xdb\xf6\x15\'\xe1I\xfe\xe65\x86\x04\x19\xfb\xbd\xf15+G\xd78\x8e[.\x176S\xf4\x86K[;\xff\'\x84\xe2 \xb9\xa3\xadvJc\n/\xbc\xea\x19C\x04\xe3X\x13\x16U[\xba\f\xe6\v\xcd\xa7\x83Y\x026\xf2]\xe1\x161\xb1Q\x8cu\xc05\xffw\xdc\xd2\x8d\xa9\xef\xae\xd03\"\xc3O\xe3\x05\x84\x84\xe5\xe6\xf8K\xe7\x9d\x86\xb8\xf9w\xc8\x14G\x13\x92\xe3\xcc$X\x148\x8a\x12\xcbO\xec\xfa\xf5\xaa\xf1\xe8\bcL\xa5\xee\x7ft\x13f\x00\x11\xc1\xf8\ba\x05\x91t3Hn\x97\x0env\"J\xecq\xb0y\x7f\xf9\x91\x03\x88\xfe\xfb\xc5k\x01x\xd8\xfbJ\xf1\x8bk\xbe\xf2(/\x06\xa4\xaeL\x850\xde\x9ewh\xecBz\x9a\xf4\'R\xb3\xf1H\xa9 !G\xff\x062\x85UgC!\xf8l\aX\xb1Y\x01U\x84\x89\xf9KG\x83\xd7\xd6Cq\x1d\"}\xbc5\x9d\xd3\x7f\xf7\x84N\x88\xfcr\xd3\xb3+\x10[\xcfY\x84\xe8\x1a\xcd\xcfk\xe5\xc8(\xcc0X;\xf0_\xb7\xc92\x1eQ\v\x1b\x86Q(\x1b\xb0z\xc7\x960\xab\xf40G\t\xd6\'\xb9\x1dv\"D\xfc\x93H\xd8X\xc6\xf1\x9d\xa2\xe3\xbb'}) 09:52:29 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x30}}, 0x0) [ 1172.705034][T28175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.776617][T28175] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 09:52:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x0) [ 1172.824475][T28175] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 09:52:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1172.902696][T28175] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1172.946223][T28175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:52:29 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)={@map=0x1, r0, 0x2}, 0x10) 09:52:29 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) clone(0x1a20500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1173.009968][T28175] usbip-host 6-1: 6-1 is not in match_busid table... skip! 09:52:29 executing program 4: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r2 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) [ 1173.090176][ T28] audit: type=1804 audit(1599472349.475:732): pid=31246 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir433454752/syzkaller.5CNtB7/1240/bus" dev="sda1" ino=15793 res=1 errno=0 [ 1173.214119][T31251] input: syz1 as /devices/virtual/input/input13 [ 1173.968529][T31267] input: syz1 as /devices/virtual/input/input14 [ 1174.396960][ T230] tipc: TX() has been purged, node left! 09:52:31 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) ftruncate(r0, 0x2008003) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r1, 0x0) preadv2(r1, &(0x7f0000000440)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1, 0x0, 0x0, 0xd) 09:52:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in=@private}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) 09:52:31 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x101442, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 09:52:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 09:52:31 executing program 4: socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x1c, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0) clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) pipe2(&(0x7f0000000080), 0x80000) 09:52:31 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) clone(0x1a20500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[], 0x208e24b) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f0000001d00)=""/4096, 0x1000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 1174.785622][T16343] usb 6-1: USB disconnect, device number 6 09:52:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0", 0x7a}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f", 0x36}, {&(0x7f0000000000)="40c11437fb00d6eab04b0c06251f8168813a461ace70236fa0", 0x19}], 0x3}}], 0x1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0f268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xc98, 0x11, 0x0, 0x27) [ 1174.944300][T31301] input: syz1 as /devices/virtual/input/input15 [ 1175.059273][ T28] audit: type=1800 audit(1599472351.446:733): pid=31313 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16098 res=0 errno=0 09:52:31 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) [ 1175.105453][ T28] audit: type=1800 audit(1599472351.466:734): pid=31309 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16098 res=0 errno=0 09:52:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r2) 09:52:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000200)={'veth0_to_batadv\x00', {0x2, 0x0, @broadcast}}) 09:52:32 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 09:52:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) dup3(r0, r1, 0x0) 09:52:32 executing program 5: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="00000090fd39"}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xffffa888}}, 0x5ee) 09:52:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000900"], 0x0) 09:52:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x58, 0x6, 0x618, 0x3b0, 0x2e0, 0x3b0, 0x3b0, 0x2e0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:etc_runtime_t:s0\x00'}}}, {{@ipv6={@loopback, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678) 09:52:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000340)="923921fc", 0x4, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) 09:52:32 executing program 0: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@remote, @empty, @loopback}, 0xc) memfd_create(&(0x7f0000000180)='&.\\keyring\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 09:52:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x57488646c23019bd, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'dummy0\x00'}]}, 0x30}}, 0x0) 09:52:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, [@policy_type={0xa}]}, 0xcc}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x107, 0x0) 09:52:32 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='\x8b\xcd\x88#gY\x03y:\xc6n\x19\xa6\xfe\xc5\xd5\x96#\xcbqG\x8b\xf1|Dp\x9b\xb8\x96\x81\xff\x8b\x12\xd1\xf4)\xfbU\xf3+%2\xcb\xed/Sy\x9a\x10.m\xf1\x019\x84\xaf-\x8ch\xcd\xd4K(\x02\x9bE\xaa\x8cO\xf2\x00\xb8\xadA\xaaJ\xa3\xed\xd8Mea\x98\xdcP\xdaY\x1b\x15\xfd\x82\x04\xe8\x97\x85\xb1\xea\xde\xa7\xe7U\x18\xe8k\xe5\xe6J\x05\xba\x9e\xa8\xf4\a9\xf9ut\xd6\xdeU\xf9t\xd3zF\x1c}\xebb\xa2\x11\xe75\x90\xd7\x01s?\x8d\xb9=\xb4\xa0\xe3\xf7\x8c\x98\x12\xec_\xb2`\xb7\xe0\xdfp\xb5\x88\x03\xc06\x021\x14{\tz\x1f\tN', 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ion\x00', 0x0, 0x0) 09:52:32 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0xb, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x5}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:52:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xa, [@typedef, @volatile, @const, @fwd, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x5e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4b9511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x42}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 09:52:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x120000000002) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/arp\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000640)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x315, 0x800000, 0x0) 09:52:32 executing program 2: pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 09:52:32 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="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", 0xfa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1176.383087][T31372] ptrace attach of "/root/syz-executor.4"[31371] was attempted by "/root/syz-executor.4"[31372] [ 1176.527416][T31385] ptrace attach of "/root/syz-executor.5"[31384] was attempted by "/root/syz-executor.5"[31385] [ 1176.617096][T28225] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1176.866965][T28225] usb 4-1: Using ep0 maxpacket: 16 [ 1176.987799][T28225] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1177.027449][T28225] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1177.056961][T28225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.077602][T28225] usbip-host 4-1: 4-1 is not in match_busid table... skip! 09:52:35 executing program 3: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000001680)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_enter(r2, 0x1, 0x0, 0x0, 0x0, 0x0) 09:52:35 executing program 4: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000081c1b3e1b4000001c000109022400010000000009040000010301000009210000000022050009058103"], 0x0) 09:52:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x2bd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 09:52:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7bcb9edb8f92a8f00c0387c85cd26cffb5"], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x25, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 09:52:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0xfffffdef) 09:52:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x545d, 0x74e010) [ 1179.294172][T28225] usb 4-1: USB disconnect, device number 2 09:52:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x41}}, 0x14) 09:52:35 executing program 0: unshare(0x44000400) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200100, 0x0) read$usbmon(r0, 0x0, 0x0) 09:52:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x3c, r1, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "080fec1b94dc5b4f3ee83ea2a259123e3a79acfe0b10083f5465cd9670f1e4d1a3f03f1c"}]}, 0x3c}}, 0x0) 09:52:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000029c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') syz_genetlink_get_family_id$netlbl_mgmt(0x0) gettid() preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 1179.665915][T31443] IPVS: ftp: loaded support on port[0] = 21 [ 1179.684063][T28175] usb 5-1: new high-speed USB device number 5 using dummy_hcd 09:52:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/141, 0x8d}], 0x1, &(0x7f0000000600)=""/136, 0x88}, 0x3}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000240)=""/34, 0x22}, {0x0}, {0x0}, {&(0x7f0000000940)=""/137, 0x89}], 0x4}}, {{0x0, 0x0, &(0x7f00000006c0)}, 0x2}, {{&(0x7f0000001f40)=@tipc=@id, 0x80, &(0x7f0000003180)=[{&(0x7f0000002140)=""/33, 0x21}], 0x1}, 0x1}], 0x4, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="dbdef20defa3989e4c8bc39bba669cb380e941a8481903b1ea83dc7ebd42fe33d0597b1f4273313fb7adec9bc5b48d381aad23fa6e851e921a7f8b11f5c7f214ff2d42b19e", 0x45) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3ff, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') clone(0x5000010a, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$packet(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20c1}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000000102010100230000000000000540000002d6700001800c000280f3ff0000010000000c00028005000100060000000c00028005000100060000002c00018014000300fe88010000000000000000000000010114000400fc020000000000000000000000000001140001080001000a01010008000200ac1414aa06000340000300000a000600512e3933310000000800044070712433081f000073697000080008400000a300080005400000080008000540000000080800044000005caa"], 0xc8}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) [ 1179.757454][T31443] lo speed is unknown, defaulting to 1000 [ 1179.957378][T28175] usb 5-1: Using ep0 maxpacket: 8 [ 1180.051028][T31458] IPVS: ftp: loaded support on port[0] = 21 [ 1180.087039][T28175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.138102][T28175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.175727][T31458] lo speed is unknown, defaulting to 1000 09:52:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x40}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x0) dup(0xffffffffffffffff) symlinkat(&(0x7f0000000100)='\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) write(r2, &(0x7f0000000100), 0x2c9f9de1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r5 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000007c0)="cdfdfdae56b8", 0x6}], 0x1, 0x48180a, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000003) [ 1180.297253][T28175] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.40 [ 1180.322042][T28175] usb 5-1: New USB device strings: Mfr=0, Product=28, SerialNumber=0 [ 1180.406605][T31445] IPVS: ftp: loaded support on port[0] = 21 [ 1180.412723][T28175] usb 5-1: Product: syz [ 1180.489075][T28175] usbip-host 5-1: 5-1 is not in match_busid table... skip! 09:52:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00', 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) [ 1180.680312][T31476] IPVS: ftp: loaded support on port[0] = 21 [ 1181.933648][T31445] lo speed is unknown, defaulting to 1000 09:52:38 executing program 4: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e1", 0x3d) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 09:52:38 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0x5) setresuid(0x0, 0xee01, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) setgroups(0x1, &(0x7f00000000c0)=[0x0]) setregid(0x0, r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) 09:52:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) creat(&(0x7f00000000c0)='./bus\x00', 0x0) [ 1182.363432][T16343] usb 5-1: USB disconnect, device number 5 [ 1182.696454][ T28] audit: type=1804 audit(1599472359.076:735): pid=31489 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir433454752/syzkaller.5CNtB7/1247/bus" dev="sda1" ino=16334 res=1 errno=0 09:52:39 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000557000/0x3000)=nil, &(0x7f0000556000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r2, 0x0, 0x0, 0x3, 0x0, 0x0) [ 1182.943710][ T28] audit: type=1804 audit(1599472359.156:736): pid=31496 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir433454752/syzkaller.5CNtB7/1247/bus" dev="sda1" ino=16334 res=1 errno=0 09:52:39 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 09:52:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 1183.959239][ T186] tipc: TX() has been purged, node left! 09:52:40 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000180)=0xda7, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000b40)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba00a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296dee360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b7259415f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b00", 0x89}, {0x0}, {&(0x7f0000003280)="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", 0x34b}], 0x3) 09:52:40 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="00000000000000f6f610ff4b2fa231000692f600aaaaaaaaaa"], 0x20}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="c10095000000fcdbdf25020000000c0004000004001b6a4faa5f5d563579f5"], 0x20}}, 0x4000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="636f6d6d69743d3078303030303030fea4d4d399d9d5787a61de662b303030303030303030302c00adacdcc4e34f914ca613e3f72e22fc3302561f2ddcbe0847f2207d2bbe3cd44feb92bb7daf4267e5c996cb0fc7aa64d9acd7e62d2ed071f3ad99938fa8758f11eccf1205e4be08d199c41a89794707d1626a4496c6cdaa1a5615c10320f543939e0299102458655c235d712822493c9c3f8629d56ffef02a371f0b4e0f7cb8d21f04d9"]) 09:52:40 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x40085511, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:52:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/141, 0x8d}], 0x1, &(0x7f0000000600)=""/136, 0x88}, 0x3}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000240)=""/34, 0x22}, {0x0}, {0x0}, {&(0x7f0000000940)=""/137, 0x89}], 0x4}}, {{0x0, 0x0, &(0x7f00000006c0)}, 0x2}, {{&(0x7f0000001f40)=@tipc=@id, 0x80, &(0x7f0000003180)=[{&(0x7f0000002140)=""/33, 0x21}], 0x1}, 0x1}], 0x4, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x200, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="dbdef20defa3989e4c8bc39bba669cb380e941a8481903b1ea83dc7ebd42fe33d0597b1f4273313fb7adec9bc5b48d381aad23fa6e851e921a7f8b11f5c7f214ff2d42b19e", 0x45) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3ff, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/partitions\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') clone(0x5000010a, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$packet(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20c1}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000000102010100230000000000000540000002d6700001800c000280f3ff0000010000000c00028005000100060000000c00028005000100060000002c00018014000300fe88010000000000000000000000010114000400fc020000000000000000000000000001140001080001000a01010008000200ac1414aa06000340000300000a000600512e3933310000000800044070712433081f000073697000080008400000a300080005400000080008000540000000080800044000005caa"], 0xc8}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 09:52:40 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x54, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@network_terminal={0x7}]}}}]}}]}}, 0x0) [ 1184.357725][T31587] EXT4-fs (loop2): Unrecognized mount option "commit=0x000000þ¤ÔÓ™ÙÕxzaÞf+0000000000" or missing value [ 1184.426024][T31587] EXT4-fs (loop2): failed to parse options in superblock: commit=0x000000þ¤ÔÓ™ÙÕxzaÞf+0000000000 [ 1184.439269][T31587] EXT4-fs (loop2): Unrecognized mount option "commit=0x000000þ¤ÔÓ™ÙÕxzaÞf+0000000000" or missing value 09:52:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1184.491509][T31598] IPVS: ftp: loaded support on port[0] = 21 [ 1184.581635][T31598] lo speed is unknown, defaulting to 1000 09:52:41 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)) 09:52:41 executing program 1: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8004) [ 1184.986855][T16343] usb 1-1: new high-speed USB device number 3 using dummy_hcd 09:52:41 executing program 2: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) unshare(0x44000600) ioctl$BLKPG(r0, 0x1263, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) [ 1185.226215][T16343] usb 1-1: Using ep0 maxpacket: 8 09:52:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800000271}) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000003c0)="92569a1ccc5ec5f00643c4830599a3c4e980fee91d680ffa7c7ff2beeb7d169e8cd069b2becf8388b79666dee53963393cf2e98745cd7957e5ba9757a991df2124899f7d03c7af888661c56dcae14611906a11cd7b6a1b18c3cf8de70a5fa27acc762954da5dffc1d9e1362f0b50f8d3c190469741f923d7187a9093f396d594616948fa7b840f3cd833576e64ef9cfb159ce20680499a4c7d8e52e12fd48fafe93c6dad867c1f4f9bfea944d6776eee6b3022c42e8d784e2e31e1dbfd", 0xbd}, {0x0}], 0x2, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x0, 0x9f}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) pipe(&(0x7f0000000140)) 09:52:41 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1185.346823][T16343] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1185.412756][T31620] IPVS: ftp: loaded support on port[0] = 21 09:52:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="34000000c672f3d11df7ca6e42ce8af49a46ab1878c8cf9cfbf6e3789f4730092e233696f00dffc2ecafc4a7fa29615b2c3170e469d144614364f0e1716e6cbfd1dcc7055ebc6bd9fc3fb5bf5e966f579b4705403fc1c671b06796cb4c12717bb1848e9b381f5c51383e365da1a226c5fea3edf9c0394b9801b6b9a8db8cea93", @ANYRES16=0x0], 0x34}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x20, 0x0, 0x2, {0x2, 0x7}}, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000100)={0x0, 0xf, 0x60, {0x5, 0xf, 0x60, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xbd, 0x1f}, @generic={0x28, 0x10, 0x2, "24bff1092a237bf5ef43bbb35337bfb6b8844263bae0a2f0eb3977922f34e95df10a820ea1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "303b3969924c3ce7aa6da3f3c8993960"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x0, 0x6}]}}, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x3f, 0xcc, "bf106569", "a979fa2e"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x2, 0x5, 0x2, 0x3, 0x3, 0xf000}}}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40086604, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x7b78983, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19], 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) [ 1185.657084][T16343] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1185.694514][T16343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.775559][T16343] usb 1-1: Product: syz 09:52:42 executing program 4: socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000029c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 1185.825501][T16343] usb 1-1: Manufacturer: syz [ 1185.863216][T16343] usb 1-1: SerialNumber: syz [ 1185.912247][T16343] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1186.067790][T31621] IPVS: ftp: loaded support on port[0] = 21 [ 1186.152861][T31643] xt_CT: No such helper "pptp" 09:52:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x2000000001c, 0x0) read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) write$binfmt_elf64(r1, 0x0, 0x0) [ 1186.287910][T31620] lo speed is unknown, defaulting to 1000 09:52:43 executing program 4: socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000029c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r1, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 1187.495375][T16343] usb 1-1: USB disconnect, device number 3 [ 1187.840917][T31621] lo speed is unknown, defaulting to 1000 [ 1198.006546][ T186] tipc: TX() has been purged, node left! [ 1198.012821][ T186] tipc: TX() has been purged, node left! [ 1198.031378][ T186] tipc: TX() has been purged, node left! [ 1198.039988][ T186] tipc: TX() has been purged, node left! 09:52:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000100)=""/224, 0xe0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10003, 0x0, "00000000000000ff0700"}) 09:52:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r3, &(0x7f0000000040)=ANY=[], 0x1) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x2000000001c, 0x0) read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) write$binfmt_elf64(r1, 0x0, 0x0) 09:52:56 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,metacopy=on,xino=auto']) 09:52:56 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_adjtime(0x10, &(0x7f00000004c0)) 09:52:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) pipe2(&(0x7f0000000000), 0x0) umount2(&(0x7f00000000c0)='./bus\x00', 0x3) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x2, 0x4000000000005}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) 09:52:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x8}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1199.807980][ T28] audit: type=1804 audit(1599472376.198:737): pid=31744 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1169/bus" dev="sda1" ino=16323 res=1 errno=0 09:52:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') 09:52:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x10000dc4, 0x4) 09:52:56 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100006c8c0a40f60d21004bd1000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 09:52:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x8}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) 09:52:56 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000100)='lo:\a\x00`Q\xb1Y\xa0y}\vT\xd2\xff\x00\x00\x00 ') 09:52:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000100)='threaded\x00', 0xd6f0e2de) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r2, 0x0, 0x5) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 1200.434854][T16343] usb 1-1: new high-speed USB device number 4 using dummy_hcd 09:52:57 executing program 3: sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) 09:52:57 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x1, 0x101, 0x2}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 09:52:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x8}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1201.165144][T16343] usb 1-1: New USB device found, idVendor=0df6, idProduct=0021, bcdDevice=d1.4b [ 1201.196911][T16343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.284574][T16343] usbip-host 1-1: 1-1 is not in match_busid table... skip! 09:52:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x8}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1201.482907][ T28] audit: type=1804 audit(1599472377.868:738): pid=31800 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1169/bus" dev="sda1" ino=16323 res=1 errno=0 [ 1201.640429][ T28] audit: type=1804 audit(1599472377.998:739): pid=31744 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1169/bus" dev="sda1" ino=16323 res=1 errno=0 09:52:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) pipe2(&(0x7f0000000000), 0x0) umount2(&(0x7f00000000c0)='./bus\x00', 0x3) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendfile(r1, r3, 0x0, 0x200fc0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x2, 0x4000000000005}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) 09:52:58 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5b}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 1201.909942][ T28] audit: type=1804 audit(1599472378.298:740): pid=31809 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1170/bus" dev="sda1" ino=16225 res=1 errno=0 09:52:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x8}, 0xffffffde) ioctl$TCXONC(r3, 0x540a, 0x1) 09:52:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000140)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1071fe, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x1015) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) pwritev(r0, &(0x7f0000001640)=[{&(0x7f0000000100)="84", 0xffffff97}], 0x13, 0x1c00, 0x3) [ 1202.216575][ T28] audit: type=1800 audit(1599472378.598:741): pid=31820 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=8 res=0 errno=0 09:52:59 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:52:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc3040000040001190224"], 0x0) 09:52:59 executing program 3: syz_open_dev$usbmon(0x0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=ANY=[], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 09:52:59 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x3], @random="3aa2586c1481", @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr, {[@noop, @timestamp_addr={0x7, 0x4, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x3e, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x58}, {0x8, 0x88be, 0x0, {{}, 0x4c1}}}}}}}, 0x0) 09:52:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001780)="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", 0x23b}, {&(0x7f0000000000)="12c71968000337b1b2f259279cf3cbae68b4a79f199aa96eeb040a55e0754425be97eaef95fe75f975", 0x29}], 0x2) syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @empty, @val={@void}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @multicast, @ipv4={[], [], @multicast1}, @local, @remote}}}}, 0x0) sendto$inet(r0, &(0x7f0000000140)="0c268a860734e5c3b4527a926f1f6588b967481241ba7860005cf65ac618ded8975b95abeaf4b4834ff922b3f1e0b02bd67aa03059bc0600000050a3a07e7a8044a34ea6f7ae55d88fecf9fd2aeb6de554a8af9b66bad1d461af5cbc", 0xffffffffffffffdb, 0x0, 0x0, 0x0) 09:52:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1203.096478][T28177] usb 1-1: USB disconnect, device number 4 [ 1203.266539][T31846] attempt to access beyond end of device [ 1203.279596][T31846] loop0: rw=2049, want=66, limit=60 [ 1203.289657][ T28] audit: type=1804 audit(1599472379.678:742): pid=31846 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/992/file1/bus" dev="loop0" ino=9 res=1 errno=0 [ 1203.325687][T31846] attempt to access beyond end of device [ 1203.339558][T31846] loop0: rw=2049, want=68, limit=60 [ 1203.350328][T31846] Buffer I/O error on dev loop0, logical block 33, lost async page write [ 1203.363185][T31846] attempt to access beyond end of device [ 1203.373522][T31846] loop0: rw=2049, want=70, limit=60 [ 1203.383339][T31846] Buffer I/O error on dev loop0, logical block 34, lost async page write [ 1203.407973][T31853] attempt to access beyond end of device 09:52:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1203.427897][T31853] loop0: rw=0, want=64, limit=60 [ 1203.446623][T31853] Buffer I/O error on dev loop0, logical block 31, async page read 09:52:59 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="1f55836249", 0x5}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1203.479857][T31853] attempt to access beyond end of device [ 1203.496322][T31853] loop0: rw=0, want=66, limit=60 [ 1203.503588][T31853] Buffer I/O error on dev loop0, logical block 32, async page read [ 1203.520304][T31853] attempt to access beyond end of device [ 1203.556572][T31853] loop0: rw=0, want=68, limit=60 [ 1203.581851][T31853] Buffer I/O error on dev loop0, logical block 33, async page read [ 1203.619936][T31853] attempt to access beyond end of device [ 1203.637971][T31861] ptrace attach of "/root/syz-executor.5"[31860] was attempted by "/root/syz-executor.5"[31861] [ 1203.655509][T31853] loop0: rw=0, want=70, limit=60 [ 1203.664436][ T2464] usb 5-1: new high-speed USB device number 6 using dummy_hcd 09:53:00 executing program 5: ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6000) 09:53:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1203.684228][T31853] Buffer I/O error on dev loop0, logical block 34, async page read [ 1203.765228][T31846] attempt to access beyond end of device [ 1203.782385][T31846] loop0: rw=2049, want=74, limit=60 [ 1203.802606][ T28] audit: type=1804 audit(1599472380.189:743): pid=31853 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/992/file1/bus" dev="loop0" ino=9 res=1 errno=0 09:53:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1203.914384][ T2464] usb 5-1: Using ep0 maxpacket: 32 [ 1204.044964][ T2464] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.070379][ T2464] usb 5-1: config 0 has no interfaces? [ 1204.145273][T31875] attempt to access beyond end of device [ 1204.151189][T31875] loop3: rw=2049, want=66, limit=60 [ 1204.181345][T31874] attempt to access beyond end of device [ 1204.188627][T31874] loop5: rw=2049, want=66, limit=60 [ 1204.196137][ T2464] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 1204.223848][ T28] audit: type=1804 audit(1599472380.609:744): pid=31875 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1013/file1/bus" dev="loop3" ino=11 res=1 errno=0 [ 1204.254180][T31878] attempt to access beyond end of device [ 1204.260792][T31878] loop0: rw=2049, want=66, limit=60 [ 1204.274204][ T2464] usb 5-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0 [ 1204.293434][T31874] attempt to access beyond end of device [ 1204.317812][T31878] attempt to access beyond end of device [ 1204.322346][T31874] loop5: rw=2049, want=68, limit=60 [ 1204.327097][ T2464] usb 5-1: Product: syz [ 1204.354565][ T2464] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1204.370120][T31878] loop0: rw=2049, want=68, limit=60 [ 1204.384386][T31874] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1204.393350][T31878] Buffer I/O error on dev loop0, logical block 33, lost async page write [ 1204.408915][ T28] audit: type=1804 audit(1599472380.679:745): pid=31882 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1195/file1/bus" dev="loop5" ino=10 res=1 errno=0 [ 1204.427191][T31878] attempt to access beyond end of device [ 1204.443295][T31874] attempt to access beyond end of device [ 1204.471122][T31878] loop0: rw=2049, want=70, limit=60 [ 1204.481398][T31874] loop5: rw=2049, want=70, limit=60 [ 1204.492049][T31878] Buffer I/O error on dev loop0, logical block 34, lost async page write [ 1204.509010][T31874] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1204.523024][T31885] attempt to access beyond end of device [ 1204.529657][T31885] loop0: rw=0, want=64, limit=60 [ 1204.545410][T31882] attempt to access beyond end of device [ 1204.551133][T31882] loop5: rw=0, want=64, limit=60 [ 1204.555106][T31885] attempt to access beyond end of device [ 1204.567567][T31885] loop0: rw=0, want=66, limit=60 [ 1204.574445][T31882] attempt to access beyond end of device [ 1204.577134][ T28] audit: type=1804 audit(1599472380.709:746): pid=31878 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/993/file1/bus" dev="loop0" ino=12 res=1 errno=0 [ 1204.598792][T31882] loop5: rw=0, want=66, limit=60 [ 1204.625987][T31885] attempt to access beyond end of device [ 1204.628492][T31882] attempt to access beyond end of device [ 1204.653744][T31885] loop0: rw=0, want=68, limit=60 [ 1204.663873][T31882] loop5: rw=0, want=68, limit=60 [ 1204.680187][T31885] attempt to access beyond end of device [ 1204.682908][T31882] attempt to access beyond end of device [ 1204.711387][T31885] loop0: rw=0, want=70, limit=60 [ 1204.716435][T31882] loop5: rw=0, want=70, limit=60 [ 1206.151645][ T17] usb 5-1: USB disconnect, device number 6 09:53:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8805, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 09:53:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1207.329251][ T186] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.489178][ T186] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.646377][ T186] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.790746][ T186] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.926956][ T186] tipc: TX() has been purged, node left! [ 1208.743155][T31916] IPVS: ftp: loaded support on port[0] = 21 [ 1209.209564][T31916] lo speed is unknown, defaulting to 1000 [ 1209.872802][T31916] chnl_net:caif_netlink_parms(): no params data found [ 1210.018743][T31916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.026464][T31916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.035686][T31916] device bridge_slave_0 entered promiscuous mode [ 1210.136425][T31916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.143734][T31916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.151529][T31916] device bridge_slave_1 entered promiscuous mode [ 1210.176587][T31916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.188893][T31916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.226288][T31916] team0: Port device team_slave_0 added [ 1210.236754][T31916] team0: Port device team_slave_1 added [ 1210.259834][T31916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.267153][T31916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.294343][T31916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.309238][T31916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.317340][T31916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.352687][T31916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.428755][T31916] device hsr_slave_0 entered promiscuous mode [ 1210.437013][T31916] device hsr_slave_1 entered promiscuous mode [ 1210.448060][T31916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1210.457488][T31916] Cannot create hsr debugfs directory [ 1210.625398][T31916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.632580][T31916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.640027][T31916] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.647172][T31916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.656161][ T2464] Bluetooth: hci1: command 0x0409 tx timeout [ 1210.667856][ T186] device hsr_slave_0 left promiscuous mode [ 1210.675310][ T186] device hsr_slave_1 left promiscuous mode [ 1210.681742][ T186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.690477][ T186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.700267][ T186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.708169][ T186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.719245][ T186] device bridge_slave_1 left promiscuous mode [ 1210.726700][ T186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.738301][ T186] device bridge_slave_0 left promiscuous mode [ 1210.746351][ T186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.761593][ T186] device bond0 left promiscuous mode [ 1210.767421][ T186] device bond_slave_0 left promiscuous mode [ 1210.773615][ T186] device bond_slave_1 left promiscuous mode [ 1210.780271][ T186] device veth1_macvtap left promiscuous mode [ 1210.786727][ T186] device veth0_macvtap left promiscuous mode [ 1210.792746][ T186] device veth1_vlan left promiscuous mode [ 1210.798736][ T186] device veth0_vlan left promiscuous mode [ 1212.733264][T10413] Bluetooth: hci1: command 0x041b tx timeout [ 1214.813074][T10413] Bluetooth: hci1: command 0x040f tx timeout [ 1215.367543][ T186] team0 (unregistering): Port device team_slave_1 removed [ 1215.394156][ T186] team0 (unregistering): Port device team_slave_0 removed [ 1215.408442][ T186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.424560][ T186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1215.490336][ T186] bond0 (unregistering): Released all slaves [ 1215.553710][ T2464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.561562][ T2464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.624518][T31916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.641825][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1215.650571][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1215.664580][T31916] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.679407][T16349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1215.688838][T16349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1215.697775][T16349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.704918][T16349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.736139][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1215.746089][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1215.756632][T30812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.763770][T30812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.771610][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1215.784754][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1215.803062][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1215.816164][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1215.824888][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1215.833933][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1215.863538][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1215.871412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1215.880796][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1215.889238][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1215.899696][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1215.909185][T31916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1215.952545][T31916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.965337][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1215.972786][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1216.097281][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1216.109819][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1216.161125][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1216.181619][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1216.194131][T16349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1216.201985][T16349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1216.223984][T31916] device veth0_vlan entered promiscuous mode [ 1216.240138][T31916] device veth1_vlan entered promiscuous mode [ 1216.272273][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1216.281375][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1216.290909][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1216.300260][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1216.314089][T31916] device veth0_macvtap entered promiscuous mode [ 1216.329202][T31916] device veth1_macvtap entered promiscuous mode [ 1216.372572][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1216.383318][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.394536][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1216.405593][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.416756][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1216.427849][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.448145][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1216.461913][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.472419][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1216.483540][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.496063][T31916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1216.505107][T28177] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1216.514907][T28177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1216.524013][T28177] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1216.532670][T28177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1216.548557][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1216.561832][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.603711][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1216.624192][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.641451][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1216.672808][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.682740][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1216.693582][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.703765][T31916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1216.715442][T31916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.727217][T31916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1216.738259][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1216.751378][T30812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:53:13 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0xfe) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xa3) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 09:53:13 executing program 3: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0xc03, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001700)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) 09:53:13 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:13 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000300)={0x0, 0x1cff, 0x2088}, 0x14) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xffffff2b) splice(r0, 0x0, r2, 0x0, 0x4fff5, 0x0) 09:53:13 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0xc, 0x0, 0x0, 0x60}, 0x435, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550c, 0x0) 09:53:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1216.913046][ T17] Bluetooth: hci1: command 0x0419 tx timeout [ 1217.144534][T32180] attempt to access beyond end of device [ 1217.151029][T32180] loop5: rw=2049, want=66, limit=60 09:53:13 executing program 4: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="0000f015010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r4, @ANYBLOB="1400020000000000000000000200ffffac14140014000100f1"], 0x40}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @local}}]}, 0x40}, 0x1, 0x8}, 0x0) 09:53:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0xffffff80, 0x178, 0x36000000, 0xc7, 0x268, 0x258, 0x258, 0x268, 0x258, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [], [], 'lo\x00', 'netpci0\x00'}, 0x0, 0x130, 0x1a0, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x8000009, 0x401}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "42c2f7ce28ef401335ddf6fb395bf4a4d216cfa5e921b6e919ef8a0d6093c6bcee49d7b46af988d8931f15a247cd97ebe28f918333489d8bc10f975c5989ee00"}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'geneve1\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 09:53:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1217.217149][ T28] audit: type=1804 audit(1599472393.600:747): pid=32180 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1196/file1/bus" dev="loop5" ino=13 res=1 errno=0 [ 1217.246418][T32180] attempt to access beyond end of device 09:53:13 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf50", 0x44}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1217.289622][T32180] loop5: rw=2049, want=68, limit=60 [ 1217.327599][T32180] buffer_io_error: 8 callbacks suppressed [ 1217.327612][T32180] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1217.406041][T32180] attempt to access beyond end of device [ 1217.428651][T32180] loop5: rw=2049, want=70, limit=60 09:53:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) 09:53:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1217.457884][T32180] Buffer I/O error on dev loop5, logical block 34, lost async page write 09:53:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980700009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000800000000000002726f7365300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000fb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000300000007000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000100000000000000000000000000000000ee00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000500000000000400000000000000000000000000000070009000000000000000000000000000000000000000010020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @dev}}}}}}, 0x0) [ 1217.508688][T32213] ptrace attach of "/root/syz-executor.1"[32212] was attempted by "/root/syz-executor.1"[32213] [ 1217.521133][T32198] attempt to access beyond end of device [ 1217.530498][T32198] loop5: rw=0, want=64, limit=60 [ 1217.551398][T32198] Buffer I/O error on dev loop5, logical block 31, async page read 09:53:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) [ 1217.601419][T32198] attempt to access beyond end of device [ 1217.629927][T32198] loop5: rw=0, want=66, limit=60 [ 1217.649925][T32198] Buffer I/O error on dev loop5, logical block 32, async page read [ 1217.687765][T32198] attempt to access beyond end of device [ 1217.689932][T32221] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1217.719790][T32198] loop5: rw=0, want=68, limit=60 [ 1217.748133][T32198] Buffer I/O error on dev loop5, logical block 33, async page read [ 1217.792516][T32198] attempt to access beyond end of device [ 1217.869715][T32198] loop5: rw=0, want=70, limit=60 [ 1217.908158][T32198] Buffer I/O error on dev loop5, logical block 34, async page read 09:53:14 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 09:53:14 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8936, &(0x7f00000001c0)={'gretap0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 09:53:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) 09:53:14 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000640)={0xa, 0x1000000000004e24, 0x4, @mcast1, 0x5}, 0x1c) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) dup2(r0, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0x9c, 0x1f, 0x0, 0x50, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, 0x8000, 0x0, 0x401, 0x5}}) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, 0x0, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0xd8, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x0, 0x1}, {0x2, 0x3, 0x1}, 0x80}}}, {{@ipv6={@mcast1, @mcast2, [0xffffff00, 0xff, 0xffffffff, 0xffffff00], [0xffffffff, 0x0, 0xff, 0xff], 'ipvlan0\x00', 'ip6gre0\x00', {0xff}, {}, 0x62, 0x3f, 0x6, 0x16}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d4, 0x4d2], 0x81, 0x5, 0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@private1, @private2={0xfc, 0x2, [], 0x1}, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xff000000, 0xffffffff], 'netdevsim0\x00', 'macvlan0\x00', {}, {}, 0x87, 0x1, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x800}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 09:53:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') finit_module(r0, 0x0, 0x0) 09:53:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 09:53:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) 09:53:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) keyctl$chown(0x6, r2, r1, r4) [ 1218.376786][ T28] audit: type=1400 audit(1599472394.760:748): avc: denied { module_load } for pid=32239 comm="syz-executor.0" path="/proc/32239/net/fib_trie" dev="proc" ino=4026532790 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=system permissive=1 [ 1218.430119][T32236] attempt to access beyond end of device [ 1218.450087][T32236] loop5: rw=2049, want=66, limit=60 [ 1218.505783][T32236] attempt to access beyond end of device [ 1218.562183][T32236] loop5: rw=2049, want=68, limit=60 [ 1218.603061][ T28] audit: type=1804 audit(1599472394.880:749): pid=32245 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1197/file1/bus" dev="loop5" ino=14 res=1 errno=0 [ 1218.611802][T32236] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1218.644357][T32252] x_tables: duplicate underflow at hook 2 09:53:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) [ 1218.855726][T32236] attempt to access beyond end of device [ 1218.911836][T32236] loop5: rw=2049, want=70, limit=60 [ 1218.947733][T32236] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1219.009113][T32245] attempt to access beyond end of device [ 1219.015805][T32245] loop5: rw=0, want=64, limit=60 [ 1219.068105][T32245] Buffer I/O error on dev loop5, logical block 31, async page read [ 1219.159512][T32245] attempt to access beyond end of device [ 1219.206428][T32245] loop5: rw=0, want=66, limit=60 [ 1219.228586][T32245] Buffer I/O error on dev loop5, logical block 32, async page read [ 1219.303624][T32245] attempt to access beyond end of device [ 1219.332762][T32245] loop5: rw=0, want=68, limit=60 [ 1219.362735][T32245] attempt to access beyond end of device [ 1219.395813][T32245] loop5: rw=0, want=70, limit=60 09:53:16 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x45, &(0x7f0000000300)={0x5, 0xf, 0x45, 0x1, [@generic={0x40, 0x10, 0xa, "546cc25211e1e668b278f43d9c93171fc427dbcff08bd714f354e6ec71a917cab5a5a223a739cc0c5043d48230b4d3f5087126456b9c760805f3b6aa70"}]}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 09:53:16 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) 09:53:16 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653078000053c27bc3276003639405cb4aed12f0000006edc00278dcff47d01000080ca99f847605e03127172c61d79cf4dd76745a4298063acf2678cef3380b9ea5c364f0e78fc064d8a3a9a14e7b2738e4907dc4e4c672d0f00c2f009b6d2a78423354046e32f08cac9559d76305fe1fcf8c0813d", 0x76}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 09:53:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) 09:53:16 executing program 3: r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000005, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x4c, 0x0, &(0x7f00000000c0)) 09:53:16 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) 09:53:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x40a80, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000002, 0x0, 0x0, 0xe7}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000140)=[{0x1000, 0x6, 0x1f, 0x7fffffff}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff5", 0x2}, {&(0x7f00000001c0)="96431fb1cb11974159cafffffffffffffffe9f1f639e6a18bc7b6c1d0b42bae36740a7169721af852826d7f14b6cae8af86707ff78a1dda993aea5952f43e7e0146a3c035f0113d617244e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d0000b9ab1bfd319f472a940000000000000000", 0x89}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d", 0x7e}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1220.531066][T32282] ptrace attach of "/root/syz-executor.0"[32278] was attempted by "/root/syz-executor.0"[32282] 09:53:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) 09:53:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) 09:53:17 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) [ 1220.590688][T32277] attempt to access beyond end of device [ 1220.613232][T32277] loop5: rw=2049, want=66, limit=60 [ 1220.621032][ T28] audit: type=1804 audit(1599472397.000:750): pid=32277 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1198/file1/bus" dev="loop5" ino=15 res=1 errno=0 [ 1220.648871][T32277] attempt to access beyond end of device [ 1220.661648][T32277] loop5: rw=2049, want=68, limit=60 [ 1220.674565][T32277] attempt to access beyond end of device [ 1220.694791][T32277] loop5: rw=2049, want=70, limit=60 [ 1220.718350][T32292] attempt to access beyond end of device [ 1220.739056][T32292] loop5: rw=0, want=64, limit=60 [ 1220.766255][T32292] attempt to access beyond end of device 09:53:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mtu(r1, 0x11, 0xa, 0x0, &(0x7f0000000400)) [ 1220.797747][T32292] loop5: rw=0, want=66, limit=60 09:53:17 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) [ 1220.819983][T32292] attempt to access beyond end of device [ 1220.837228][T32292] loop5: rw=0, want=68, limit=60 [ 1220.848080][T32292] attempt to access beyond end of device [ 1220.859784][T32292] loop5: rw=0, want=70, limit=60 [ 1220.865175][T30812] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1221.112592][T30812] usb 2-1: Using ep0 maxpacket: 32 [ 1221.312612][T30812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.330358][T30812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.348164][T30812] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1221.359512][T30812] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1221.370219][T30812] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1221.381506][T30812] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1221.542977][T30812] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.552292][T30812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.561696][T30812] usb 2-1: Product: syz [ 1221.567082][T30812] usb 2-1: Manufacturer: syz [ 1221.571662][T30812] usb 2-1: SerialNumber: syz [ 1221.578629][T30812] usbip-host 2-1: 2-1 is not in match_busid table... skip! 09:53:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0x0, 0x0, 0xd8, 0xd8, 0xd8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x1a8, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00', '\x00', {}, {}, 0x6}, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}, {0x10}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 09:53:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) 09:53:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) clone(0x1227900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:53:19 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) 09:53:19 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) 09:53:19 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x100000, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000080)={0x6, r2}) [ 1223.529890][T30812] usb 2-1: USB disconnect, device number 2 09:53:20 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ac0), 0x3ffffc2, 0x2060, 0x0) [ 1223.633812][T32331] ipt_CLUSTERIP: Please specify destination IP [ 1223.643363][T32332] ipt_CLUSTERIP: Please specify destination IP 09:53:20 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 09:53:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:20 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) [ 1223.704994][T32326] attempt to access beyond end of device [ 1223.781674][T32326] loop5: rw=2049, want=66, limit=60 09:53:20 executing program 4: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) [ 1223.816195][ T28] audit: type=1804 audit(1599472400.200:751): pid=32340 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1199/file1/bus" dev="loop5" ino=16 res=1 errno=0 09:53:20 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ac0), 0x3ffffc2, 0x2060, 0x0) 09:53:20 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) 09:53:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:20 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) 09:53:20 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) 09:53:20 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ac0), 0x3ffffc2, 0x2060, 0x0) [ 1224.258797][T32361] attempt to access beyond end of device [ 1224.296367][T32361] loop5: rw=2049, want=66, limit=60 [ 1224.334911][T32366] attempt to access beyond end of device [ 1224.335480][ T28] audit: type=1804 audit(1599472400.721:752): pid=32366 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1200/file1/bus" dev="loop5" ino=17 res=1 errno=0 [ 1224.345310][T32366] loop5: rw=2049, want=68, limit=60 [ 1224.449167][T32366] buffer_io_error: 8 callbacks suppressed [ 1224.449177][T32366] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1224.495848][T32366] attempt to access beyond end of device [ 1224.501773][T32366] loop5: rw=2049, want=70, limit=60 [ 1224.513916][ T28] audit: type=1800 audit(1599472400.901:753): pid=32327 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16359 res=0 errno=0 09:53:20 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev]}, @timestamp={0x44, 0x2, 0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}, 0x0) 09:53:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1224.544467][T32366] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1224.559888][T32361] attempt to access beyond end of device [ 1224.567372][T32361] loop5: rw=0, want=64, limit=60 [ 1224.573500][T32361] Buffer I/O error on dev loop5, logical block 31, async page read [ 1224.581884][T32361] attempt to access beyond end of device 09:53:21 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 09:53:21 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, 0x101, 0x0) 09:53:21 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ac0), 0x3ffffc2, 0x2060, 0x0) [ 1224.604991][T32361] loop5: rw=0, want=66, limit=60 [ 1224.623475][T32361] Buffer I/O error on dev loop5, logical block 32, async page read [ 1224.653752][T32361] attempt to access beyond end of device [ 1224.696174][T32361] loop5: rw=0, want=68, limit=60 09:53:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) 09:53:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) [ 1224.728066][T32361] Buffer I/O error on dev loop5, logical block 33, async page read [ 1224.800511][T32361] attempt to access beyond end of device [ 1224.810825][T32361] loop5: rw=0, want=70, limit=60 [ 1224.855672][T32361] Buffer I/O error on dev loop5, logical block 34, async page read 09:53:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) 09:53:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, 0x0, 0x0, 0x101, 0x0) 09:53:21 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:21 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000140)={0x0}) ppoll(&(0x7f0000000100)=[{r0, 0x3005}], 0x1, &(0x7f0000000180)={r2}, 0x0, 0x0) 09:53:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, 0x0, 0x0, 0x101, 0x0) 09:53:21 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1225.273740][T32411] attempt to access beyond end of device [ 1225.295705][T32411] loop5: rw=2049, want=66, limit=60 [ 1225.323821][ T28] audit: type=1804 audit(1599472401.711:754): pid=32411 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1201/file1/bus" dev="loop5" ino=18 res=1 errno=0 [ 1225.325087][T32411] attempt to access beyond end of device [ 1225.439614][T32411] loop5: rw=2049, want=68, limit=60 [ 1225.454420][T32411] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1225.475870][T32411] attempt to access beyond end of device [ 1225.483971][T32411] loop5: rw=2049, want=70, limit=60 [ 1225.489307][T32411] Buffer I/O error on dev loop5, logical block 34, lost async page write 09:53:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) io_setup(0x5, &(0x7f0000000000)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd}, 0x40) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x18}]) 09:53:22 executing program 3: getpid() sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x40000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:53:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) 09:53:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, 0x0, 0x0, 0x101, 0x0) 09:53:22 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) [ 1225.930714][T32434] attempt to access beyond end of device [ 1225.943076][T32434] loop5: rw=2049, want=66, limit=60 [ 1225.952799][ T28] audit: type=1804 audit(1599472402.341:755): pid=32434 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1202/file1/bus" dev="loop5" ino=19 res=1 errno=0 09:53:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}], 0x1, 0x101, 0x0) 09:53:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1225.979410][T32434] attempt to access beyond end of device [ 1225.985417][T32434] loop5: rw=2049, want=68, limit=60 [ 1225.990742][T32434] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1225.999444][T32434] attempt to access beyond end of device [ 1226.006236][T32434] loop5: rw=2049, want=70, limit=60 [ 1226.011560][T32434] Buffer I/O error on dev loop5, logical block 34, lost async page write 09:53:22 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) 09:53:22 executing program 0: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x18}]}, 0x20}}, 0x0) sendmsg$key(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="0202060909"], 0x48}}, 0x0) 09:53:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480), 0x0, 0x101, 0x0) [ 1226.320242][T32454] attempt to access beyond end of device [ 1226.334382][T32445] IPVS: ftp: loaded support on port[0] = 21 [ 1226.359125][T32454] loop5: rw=2049, want=66, limit=60 [ 1226.385379][ T28] audit: type=1804 audit(1599472402.771:756): pid=32461 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1203/file1/bus" dev="loop5" ino=20 res=1 errno=0 [ 1226.386772][T32461] attempt to access beyond end of device [ 1226.504094][T32445] lo speed is unknown, defaulting to 1000 [ 1226.577556][T32461] loop5: rw=2049, want=68, limit=60 [ 1226.613380][T32461] attempt to access beyond end of device [ 1226.675768][T32461] loop5: rw=2049, want=70, limit=60 [ 1229.481331][ T21] tipc: TX() has been purged, node left! 09:53:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x10002, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a92", 0x4, 0x11, 0x0, 0x0) 09:53:26 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x4000000000000002) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) 09:53:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480), 0x0, 0x101, 0x0) 09:53:26 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, &(0x7f0000000140)) 09:53:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2012}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x3e804000, 0x4}) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000300)=0x80) lsetxattr$security_ima(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0404d9b93865e1f490f2560b6cd26b41bbc1af86ca993e7897705a0c013f1cb66d647a25eed4302d9e95e63bf3472134e5d5f79ca4844ec016723b95b433135ec5ebc52f42c9745d65e410dd6f660d61b4567b0065f3ea85f8cc178a88a2f89f92e37061a4b7b61c9210edc2043575194d801a0000000000000000"], 0x4, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0x11, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x5800, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000001280)=""/34, 0x22}], 0x1, 0x0, 0x0) 09:53:26 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480), 0x0, 0x101, 0x0) 09:53:26 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:26 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1229.816171][T32516] attempt to access beyond end of device [ 1229.873552][T32516] loop5: rw=2049, want=66, limit=60 [ 1229.898214][ T28] audit: type=1804 audit(1599472406.281:757): pid=32525 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1008/bus" dev="sda1" ino=16365 res=1 errno=0 09:53:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1230.014038][ T28] audit: type=1804 audit(1599472406.281:758): pid=32525 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1008/bus" dev="sda1" ino=16365 res=1 errno=0 [ 1230.141761][ T28] audit: type=1804 audit(1599472406.311:759): pid=32529 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1008/bus" dev="sda1" ino=16365 res=1 errno=0 [ 1230.168392][ T28] audit: type=1804 audit(1599472406.311:760): pid=32529 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1008/bus" dev="sda1" ino=16365 res=1 errno=0 [ 1230.214874][ T28] audit: type=1804 audit(1599472406.311:761): pid=32529 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1008/bus" dev="sda1" ino=16365 res=1 errno=0 [ 1230.248401][T32536] attempt to access beyond end of device [ 1230.255397][T32536] loop5: rw=2049, want=66, limit=60 09:53:27 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf5ec29954197b5564e6ac851909cf99421f46b04fff0c935433e6691f8b25bee7df03b08db40ba73ac381dd4dea5dac863b5e2e3300bbd04055fff98a5c92c4b0b0deb44d872aa7bb025d0118d0e12363949f0f52917f95dc079f7c82a8e9eb1c1c840ec3dc93d87be6f6ed", 0xd1}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:53:27 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{0x0}], 0x1, 0x101, 0x0) 09:53:27 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:27 executing program 0: mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e20, @empty}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 09:53:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8400fffffffa) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:27 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:27 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='\f', 0x1, r1) keyctl$search(0xa, r0, &(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, r0) 09:53:27 executing program 0: 09:53:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{0x0}], 0x1, 0x101, 0x0) [ 1230.729476][T32563] ptrace attach of "/root/syz-executor.3"[32562] was attempted by "/root/syz-executor.3"[32563] 09:53:27 executing program 2: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1230.831836][T32555] attempt to access beyond end of device [ 1230.837677][T32555] loop5: rw=2049, want=66, limit=60 09:53:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000002, 0x0, &(0x7f0000000140)={0x0, 0x0}) 09:53:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{0x0}], 0x1, 0x101, 0x0) 09:53:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000016001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x784, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 09:53:27 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:27 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x2008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x100) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\\'], 0xd) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c575) openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="81"], 0x1) [ 1231.175350][T32586] attempt to access beyond end of device [ 1231.181359][T32586] loop5: rw=2049, want=66, limit=60 [ 1231.189118][ T28] audit: type=1804 audit(1599472407.571:762): pid=32586 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1207/file1/bus" dev="loop5" ino=24 res=1 errno=0 [ 1231.190127][T32586] attempt to access beyond end of device 09:53:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}], 0x1, 0x0, 0x0) [ 1231.222257][T32586] loop5: rw=34817, want=66, limit=60 [ 1231.229254][T32586] attempt to access beyond end of device [ 1231.235079][T32586] loop5: rw=524288, want=66, limit=60 [ 1231.240608][T32586] attempt to access beyond end of device [ 1231.246495][T32586] loop5: rw=0, want=66, limit=60 09:53:27 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1231.395726][ T28] audit: type=1804 audit(1599472407.781:763): pid=32599 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1012/file1/file0" dev="loop0" ino=25 res=1 errno=0 09:53:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_on='index=on'}]}) 09:53:28 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}], 0x1, 0x0, 0x0) 09:53:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1231.730255][T32611] attempt to access beyond end of device [ 1231.793780][T32611] loop5: rw=2049, want=66, limit=60 09:53:28 executing program 0: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, 0x0, 0x4000010) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f0000000640)={0xa, 0x1000000000004e24, 0x0, @ipv4={[], [], @empty}}, 0x1c) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = dup2(r0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) recvmmsg(r2, &(0x7f0000001c80)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000000340)=""/186, 0xba}, {&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/165, 0xa5}], 0x4, &(0x7f0000000680)=""/4096, 0x1000}, 0x7fffffff}], 0x1, 0x10122, &(0x7f0000001d40)) r4 = syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0xac, r4, 0x0, 0x70bd25, 0xab2f, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x24000001) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, 0x0, 0x4000) [ 1231.817388][ T28] audit: type=1804 audit(1599472408.201:764): pid=32616 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1208/file1/bus" dev="loop5" ino=26 res=1 errno=0 [ 1231.823556][T32616] attempt to access beyond end of device [ 1231.911730][T32616] loop5: rw=34817, want=66, limit=60 09:53:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/239, 0xef}], 0x1, 0x0, 0x0) 09:53:28 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:28 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:28 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac26a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 09:53:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:28 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60a0f00000083a0000000000000000000000000000000000ff0c"], 0x0) 09:53:28 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1232.309662][T32640] attempt to access beyond end of device [ 1232.380885][T32640] loop5: rw=2049, want=66, limit=60 [ 1232.413752][T32648] ptrace attach of "/root/syz-executor.3"[32645] was attempted by "/root/syz-executor.3"[32648] 09:53:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x84, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_disconnect(r0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "6a22e701"}]}}, 0x0}, 0x0) 09:53:28 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x23, 0x0, 0xb) [ 1232.448365][ T28] audit: type=1804 audit(1599472408.831:765): pid=32646 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1209/file1/bus" dev="loop5" ino=27 res=1 errno=0 09:53:29 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1232.771481][T28177] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1232.836697][ T28] audit: type=1804 audit(1599472409.211:766): pid=32663 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1210/file1/bus" dev="loop5" ino=28 res=1 errno=0 09:53:29 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x2321) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r0}) truncate(&(0x7f00000002c0)='./bus\x00', 0x200) 09:53:29 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0xb5bab2ca266c1c7d, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}}, 0x0) 09:53:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:29 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:29 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1233.172982][T28177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 09:53:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x3de, &(0x7f0000c22fa0)=[{&(0x7f0000000040)=""/15, 0x2d77744}], 0x1, 0x0) [ 1233.258984][T28177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 09:53:29 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1233.331014][T28177] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.40 [ 1233.391197][T28177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.444281][T28177] usbip-host 4-1: 4-1 is not in match_busid table... skip! 09:53:31 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x2}) 09:53:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:31 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x42b, 0x0, 0x0, {{}, {}, {0x10, 0x17, {0xfffffffe, 0x0, @l2={'ib'}}}}}, 0x2c}}, 0x0) 09:53:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0/file0/file0/file0\x00'}, 0x6e) [ 1235.504444][ T2464] usb 4-1: USB disconnect, device number 3 09:53:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1235.595956][T32724] tipc: Enabling of bearer rejected, illegal name 09:53:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mtu(r1, 0x29, 0x3, 0x0, &(0x7f0000000400)) [ 1235.652867][T32729] tipc: Enabling of bearer rejected, illegal name 09:53:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac00000000006300e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:53:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:32 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1235.706339][T32730] binder: 32726:32730 ioctl c0306201 20000200 returned -22 [ 1235.733697][T32727] attempt to access beyond end of device [ 1235.761725][T32734] binder: 32726:32734 ioctl c018620c 200000c0 returned -22 [ 1235.784680][T32727] loop5: rw=2049, want=66, limit=60 09:53:32 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000d40)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1235.824022][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1235.824036][ T28] audit: type=1804 audit(1599472412.212:769): pid=32735 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1213/file1/bus" dev="loop5" ino=31 res=1 errno=0 09:53:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000009980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="1a270416cf8e3fba94850c02182241f1d64f891cc6a3b257ef459b78c76182c65d9271d412e264affb5c03ac914d6ca8fe9eac0de5b046c6b80e0cf042e240470d5194cab9e17847c1a89af7edcd3b282c156edfde2388844ec2d24ebddf7281cb58178317dc44ac7b06796956f52adf71de5d24458649a8656df970fcc376845470be5f04e6d8c8cd6e68cfdb7728ed627532f7ce474627131397c8b34adb6194c1c340511ae25d6bfdcb94780b998db44284d5effc8f506e8e60dfe0c58d27842afb83730f9faa99eb558864ca4c784646dc04fc234c86e2b73f89be1d79ce8a6447e9ec42bec54aa278298d", 0xed}, {&(0x7f0000000080)="ba29dd88bd285073e7a9af25203a5bf45d9ba4d2967115f76f25665533fc837b467a47c15e2a9ac928087b99d2152cc157487d9cbf994cd64dcbc907d4ccf4225846ccafe7f30e5d35b0d5aaee", 0x4d}, {&(0x7f0000000000)="93d29e5363e8", 0x6}, {&(0x7f0000000240)="0439", 0x2}], 0x4}}], 0x1, 0x0) 09:53:32 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:32 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0xfffffff8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:32 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x7f, 0x0, 0x0, 0x0, 0x0, "0000000000000400"}) 09:53:32 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="b6", 0xfffffe7e) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 09:53:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:32 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1236.290508][T32762] attempt to access beyond end of device [ 1236.313792][T32762] loop5: rw=2049, want=66, limit=60 [ 1236.333590][ T28] audit: type=1804 audit(1599472412.722:770): pid=303 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1214/file1/bus" dev="loop5" ino=32 res=1 errno=0 [ 1236.334173][ T303] attempt to access beyond end of device [ 1236.542818][ T303] loop5: rw=2049, want=68, limit=60 [ 1236.559155][ T303] buffer_io_error: 2 callbacks suppressed [ 1236.559166][ T303] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1236.583950][ T303] attempt to access beyond end of device [ 1236.589846][ T303] loop5: rw=2049, want=70, limit=60 [ 1236.605797][ T303] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1236.636988][T32762] attempt to access beyond end of device [ 1236.644978][T32762] loop5: rw=2049, want=68, limit=60 [ 1236.673634][T32762] Buffer I/O error on dev loop5, logical block 33, lost async page write 09:53:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x6, [@multicast, @multicast, @empty, @link_local, @link_local, @empty]}) 09:53:33 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0xf, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x2c}}, 0x0) [ 1236.703777][T32762] attempt to access beyond end of device [ 1236.720651][T32762] loop5: rw=2049, want=70, limit=60 [ 1236.758521][T32762] Buffer I/O error on dev loop5, logical block 34, lost async page write 09:53:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:33 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200008d5, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x80800) socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0x11, 0x3, 0x0) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875b2e32a60b244e340b7679500800058110308d9123127ecce6616f3f6db1c00010000000000210050740000000000000006ad8e5ecc326d3a09ffc200000000000000000000e000"}, 0x80) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x0) [ 1237.172080][ T353] attempt to access beyond end of device [ 1237.177859][ T353] loop5: rw=2049, want=66, limit=60 [ 1237.184817][ T28] audit: type=1804 audit(1599472413.572:771): pid=353 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1215/file1/bus" dev="loop5" ino=33 res=1 errno=0 [ 1237.185283][ T353] attempt to access beyond end of device [ 1237.216774][ T353] loop5: rw=2049, want=68, limit=60 09:53:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x7f, 0x0, 0x0, 0x0, 0x0, "0000000000000400"}) 09:53:33 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="9be7974865753876c63ab5564eeb6ae896d6cb08816df0113a2455b5039f2e74e1a90704d725f1f1f7fff93566493702005e4646796e5700cc3a01d4"], 0x65) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000100)=@v1={0x1000000, [{0x2}]}, 0xc, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 09:53:33 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1237.222278][ T353] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1237.231352][ T353] attempt to access beyond end of device [ 1237.237000][ T353] loop5: rw=2049, want=70, limit=60 [ 1237.242343][ T353] Buffer I/O error on dev loop5, logical block 34, lost async page write 09:53:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) [ 1237.274248][ T357] attempt to access beyond end of device [ 1237.316869][ T357] loop5: rw=2049, want=68, limit=60 [ 1237.322286][ T357] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1237.331446][ T357] attempt to access beyond end of device [ 1237.338221][ T357] loop5: rw=2049, want=70, limit=60 [ 1237.344716][ T357] Buffer I/O error on dev loop5, logical block 34, lost async page write 09:53:33 executing program 1: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) 09:53:34 executing program 1: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1237.696561][ T28] audit: type=1804 audit(1599472414.082:772): pid=378 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1216/file1/bus" dev="loop5" ino=34 res=1 errno=0 09:53:34 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x4000000000000002) r2 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r2, 0x540a, 0x1) 09:53:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 1238.116374][ T28] audit: type=1804 audit(1599472414.502:773): pid=394 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1217/file1/bus" dev="loop5" ino=35 res=1 errno=0 [ 1238.171090][ T399] input: syz0 as /devices/virtual/input/input16 09:53:34 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0xf4240, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x36}, [@call={0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) 09:53:34 executing program 1: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:34 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:34 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x8400fffffffa) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8992, &(0x7f0000002400)={'team0\x00'}) 09:53:34 executing program 1: r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:34 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:34 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000100000a20000000020301002a0000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="5a000000030301020000000800000000000000000c0002"], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1238.510169][ T28] audit: type=1804 audit(1599472414.892:774): pid=421 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1218/file1/bus" dev="loop5" ino=36 res=1 errno=0 09:53:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) ftruncate(0xffffffffffffffff, 0x0) 09:53:35 executing program 1: r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1238.653732][ T438] netlink: 58 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1238.883842][ T445] attempt to access beyond end of device [ 1238.899649][ T445] loop5: rw=2049, want=66, limit=60 [ 1238.914086][ T28] audit: type=1804 audit(1599472415.302:775): pid=445 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1219/file1/bus" dev="loop5" ino=37 res=1 errno=0 [ 1238.916072][ T445] attempt to access beyond end of device [ 1238.945562][ T445] loop5: rw=2049, want=68, limit=60 [ 1238.950912][ T445] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1238.959474][ T445] attempt to access beyond end of device [ 1238.965801][ T445] loop5: rw=2049, want=70, limit=60 [ 1238.971207][ T445] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1238.980046][ T447] attempt to access beyond end of device [ 1238.985870][ T447] loop5: rw=0, want=64, limit=60 [ 1238.990985][ T447] attempt to access beyond end of device [ 1238.996687][ T447] loop5: rw=0, want=66, limit=60 [ 1239.003665][ T447] attempt to access beyond end of device [ 1239.009497][ T447] loop5: rw=0, want=68, limit=60 [ 1239.016142][ T447] attempt to access beyond end of device [ 1239.021947][ T447] loop5: rw=0, want=70, limit=60 09:53:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x6, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 09:53:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:35 executing program 1: r0 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:35 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) ftruncate(0xffffffffffffffff, 0x0) 09:53:35 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1239.351232][ T457] attempt to access beyond end of device 09:53:35 executing program 3: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x400002200006007, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) unshare(0x44000600) ioctl$BLKPG(r0, 0x401070c9, 0x0) [ 1239.393425][ T457] loop5: rw=2049, want=66, limit=60 09:53:35 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:35 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc028660f, &(0x7f00000005c0)=0x443000000) 09:53:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1239.445409][ T28] audit: type=1804 audit(1599472415.832:776): pid=463 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1220/file1/bus" dev="loop5" ino=38 res=1 errno=0 [ 1239.491633][ T463] attempt to access beyond end of device [ 1239.498201][ T463] loop5: rw=2049, want=68, limit=60 [ 1239.522854][ T463] attempt to access beyond end of device 09:53:35 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) [ 1239.548128][ T463] loop5: rw=2049, want=70, limit=60 [ 1239.548186][ T468] IPVS: ftp: loaded support on port[0] = 21 [ 1239.585783][ T457] attempt to access beyond end of device [ 1239.592489][ T457] loop5: rw=0, want=64, limit=60 09:53:36 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1239.610171][ T457] attempt to access beyond end of device [ 1239.637899][ T468] lo speed is unknown, defaulting to 1000 [ 1239.640537][ T457] loop5: rw=0, want=66, limit=60 [ 1239.658329][ T457] attempt to access beyond end of device [ 1239.689487][ T457] loop5: rw=0, want=68, limit=60 09:53:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1239.716863][ T457] attempt to access beyond end of device [ 1239.748529][ T457] loop5: rw=0, want=70, limit=60 09:53:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) ftruncate(0xffffffffffffffff, 0x0) 09:53:36 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:36 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000000280)) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x40001}) 09:53:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1240.112930][ T499] attempt to access beyond end of device [ 1240.132227][ T499] loop5: rw=2049, want=66, limit=60 [ 1240.191207][ T28] audit: type=1804 audit(1599472416.572:777): pid=505 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1221/file1/bus" dev="loop5" ino=39 res=1 errno=0 [ 1240.193955][ T499] attempt to access beyond end of device [ 1240.247604][ T499] loop5: rw=2049, want=68, limit=60 [ 1240.267261][ T499] attempt to access beyond end of device [ 1240.279818][ T499] loop5: rw=2049, want=70, limit=60 [ 1240.292628][ T505] attempt to access beyond end of device [ 1240.298478][ T505] loop5: rw=0, want=64, limit=60 [ 1240.321432][ T507] IPVS: ftp: loaded support on port[0] = 21 [ 1240.332886][ T505] attempt to access beyond end of device [ 1240.361927][ T507] lo speed is unknown, defaulting to 1000 [ 1240.364514][ T505] loop5: rw=0, want=66, limit=60 [ 1240.392151][ T505] attempt to access beyond end of device [ 1240.410413][ T505] loop5: rw=0, want=68, limit=60 [ 1240.427413][ T505] attempt to access beyond end of device [ 1240.459693][ T505] loop5: rw=0, want=70, limit=60 [ 1240.774102][ T7] tipc: TX() has been purged, node left! 09:53:39 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000004540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0xa, 0xffffff}]}}, &(0x7f0000004600)=""/200, 0x26, 0xc8, 0x8}, 0x20) 09:53:39 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:39 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:39 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:39 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002340)={0x0, 0x0, "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", "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"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) 09:53:40 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1243.640451][ T566] attempt to access beyond end of device [ 1243.687451][ T576] BPF:[1] CONST (anon) [ 1243.687984][ T566] loop5: rw=2049, want=66, limit=60 [ 1243.702239][ T576] BPF:type_id=16777215 [ 1243.716889][ T576] BPF: [ 1243.725296][ T28] audit: type=1804 audit(1599472420.112:778): pid=575 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1222/file1/bus" dev="loop5" ino=40 res=1 errno=0 [ 1243.729245][ T576] BPF:Invalid type_id 09:53:40 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1243.798832][ T576] BPF: [ 1243.798832][ T576] [ 1243.814708][ T576] BPF:[1] CONST (anon) [ 1243.818896][ T576] BPF:type_id=16777215 09:53:40 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1243.836871][ T28] audit: type=1800 audit(1599472420.112:779): pid=575 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="loop5" ino=40 res=0 errno=0 [ 1243.863689][ T576] BPF: [ 1243.875649][ T576] BPF:Invalid type_id [ 1243.895104][ T576] BPF: [ 1243.895104][ T576] 09:53:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mtu(r1, 0x11, 0xb, 0x0, &(0x7f0000000400)) [ 1243.961857][ T28] audit: type=1800 audit(1599472420.282:780): pid=574 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16360 res=0 errno=0 09:53:40 executing program 3: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x31}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 09:53:40 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1244.136543][ T594] attempt to access beyond end of device [ 1244.142917][ T594] loop5: rw=2049, want=66, limit=60 [ 1244.152749][ T28] audit: type=1804 audit(1599472420.542:781): pid=594 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1223/file1/bus" dev="loop5" ino=41 res=1 errno=0 [ 1244.164030][ T594] attempt to access beyond end of device 09:53:40 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @local}}) write$tun(r0, &(0x7f0000000540)={@void, @val={0x3}, @mpls={[], @ipv4=@dccp={{0x5, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @dev, @local}, {{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "209200", 0x0, "b90005"}, "135162120a"}}}}, 0x33) [ 1244.205564][ T601] ptrace attach of "/root/syz-executor.3"[600] was attempted by "/root/syz-executor.3"[601] 09:53:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='sched\x00') rt_sigaction(0x1f, &(0x7f00000000c0)={&(0x7f0000000040)="c4c1345c2a3683ac377012ea000000000864a2d67945d9e4400f4f8254000000c4039d487ee50d3e760636660ff62f360f1a6311f2dbe0", 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 09:53:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 09:53:40 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1244.321167][ T594] loop5: rw=2049, want=68, limit=60 [ 1244.336691][ T613] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 1244.349948][ T594] buffer_io_error: 16 callbacks suppressed [ 1244.349961][ T594] Buffer I/O error on dev loop5, logical block 33, lost async page write 09:53:40 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) [ 1244.445762][ T594] attempt to access beyond end of device [ 1244.492511][ T594] loop5: rw=2049, want=70, limit=60 09:53:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1244.526106][ T594] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1244.577770][ T605] attempt to access beyond end of device [ 1244.584731][ T605] loop5: rw=0, want=64, limit=60 [ 1244.589768][ T605] Buffer I/O error on dev loop5, logical block 31, async page read [ 1244.633216][ T605] attempt to access beyond end of device [ 1244.677832][ T605] loop5: rw=0, want=66, limit=60 [ 1244.712619][ T605] Buffer I/O error on dev loop5, logical block 32, async page read [ 1244.750393][ T605] attempt to access beyond end of device [ 1244.771954][ T605] loop5: rw=0, want=68, limit=60 [ 1244.800506][ T605] Buffer I/O error on dev loop5, logical block 33, async page read [ 1244.832720][ T605] attempt to access beyond end of device 09:53:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:41 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x190, 0xffffff80, 0x178, 0x190, 0xc7, 0x338, 0x258, 0x258, 0x338, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x190, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'vlan0\x00', {0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x1000009, 0x401}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xb9, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'vcan0\x00', 'vcan0\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@inet=@tos={{0x28, 'tos\x00'}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @rand_addr=' \x01\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) ptrace(0x10, r2) wait4(0x0, 0x0, 0x0, 0x0) 09:53:41 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) [ 1244.852086][ T605] loop5: rw=0, want=70, limit=60 [ 1244.871341][ T605] Buffer I/O error on dev loop5, logical block 34, async page read 09:53:41 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1245.011412][ T640] xt_hashlimit: max too large, truncated to 1048576 [ 1245.018355][ T640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1245.041759][ T644] ptrace attach of "/root/syz-executor.0"[640] was attempted by "/root/syz-executor.0"[644] [ 1245.346401][ T658] attempt to access beyond end of device [ 1245.369160][ T658] loop5: rw=2049, want=66, limit=60 [ 1245.399553][ T28] audit: type=1804 audit(1599472421.783:782): pid=660 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1224/file1/bus" dev="loop5" ino=42 res=1 errno=0 [ 1245.402386][ T658] attempt to access beyond end of device [ 1245.528330][ T658] loop5: rw=2049, want=68, limit=60 [ 1245.539457][ T658] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1245.566812][ T658] attempt to access beyond end of device [ 1245.578480][ T658] loop5: rw=2049, want=70, limit=60 [ 1245.584290][ T658] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1245.604905][ T660] attempt to access beyond end of device [ 1245.611200][ T660] loop5: rw=0, want=64, limit=60 [ 1245.637000][ T660] Buffer I/O error on dev loop5, logical block 31, async page read [ 1245.675032][ T660] attempt to access beyond end of device [ 1245.699964][ T660] loop5: rw=0, want=66, limit=60 [ 1245.722192][ T660] Buffer I/O error on dev loop5, logical block 32, async page read [ 1245.757166][ T660] attempt to access beyond end of device [ 1245.784684][ T660] loop5: rw=0, want=68, limit=60 [ 1245.816872][ T660] attempt to access beyond end of device [ 1245.840645][ T660] loop5: rw=0, want=70, limit=60 09:53:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/188, 0xbc}], 0x1, &(0x7f0000000840)=""/187, 0xbb}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) 09:53:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 09:53:42 executing program 0: exit(0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xfffffffc) tkill(r2, 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 09:53:42 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:42 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:42 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1246.671445][ T28] audit: type=1804 audit(1599472423.063:783): pid=684 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1225/bus" dev="sda1" ino=16368 res=1 errno=0 09:53:43 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1246.718840][ T693] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 1246.739443][ T696] ptrace attach of "/root/syz-executor.0"[693] was attempted by "/root/syz-executor.0"[696] 09:53:43 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x90, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@loopback}, 0x0, @in6=@dev}}, 0xe8) 09:53:43 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:43 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:43 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d00070f000000000004000007030001", @ANYRES32=r4, @ANYBLOB="dd3d1f090a0002"], 0x3}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) 09:53:43 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1247.245051][ T718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=718 comm=syz-executor.0 [ 1247.313968][ T723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=723 comm=syz-executor.0 09:53:43 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet(r0, &(0x7f00000027c0)=[{{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000002380)=[@ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x3, 0xbd}, @timestamp={0x44, 0x14, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}], 0x28}}], 0x1, 0x0) 09:53:43 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:43 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x40001}) 09:53:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 09:53:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:44 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1247.656638][ T744] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1247.761577][ T28] audit: type=1804 audit(1599472424.153:784): pid=741 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1226/bus" dev="sda1" ino=16348 res=1 errno=0 09:53:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:44 executing program 3: clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x9, 0x7, 0xca, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0xda, 0x2e, 0x34, 0x34, 0x34, 0x2e, 0x4, 0x58, 0x1a, 0xc]}, 0x40) 09:53:44 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:44 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/file1\x00') 09:53:44 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:44 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:44 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:44 executing program 0: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x5e) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x7}]}]}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) 09:53:44 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 09:53:44 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:45 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1248.659673][ T786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1248.735935][ T793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 09:53:45 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1248.832520][ T28] audit: type=1804 audit(1599472425.223:785): pid=791 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1227/bus" dev="sda1" ino=16365 res=1 errno=0 09:53:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) read$FUSE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, 0x0, 0x0) 09:53:45 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:45 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x0) 09:53:45 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x5, 0x5, 0xfffffffffffff801, 0x1000000, 0x0, 0x0, 0x80000}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getxattr(0x0, 0x0, 0x0, 0x0) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x2) 09:53:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:46 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1249.838808][ T827] ptrace attach of "/root/syz-executor.3"[824] was attempted by "/root/syz-executor.3"[827] 09:53:46 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1249.895290][ T832] attempt to access beyond end of device [ 1249.907886][ T832] loop5: rw=2049, want=66, limit=60 [ 1249.918245][ T28] audit: type=1804 audit(1599472426.303:786): pid=832 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1228/file1/bus" dev="loop5" ino=43 res=1 errno=0 [ 1249.926008][ T832] attempt to access beyond end of device [ 1250.012685][ T832] loop5: rw=2049, want=68, limit=60 09:53:46 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1250.033169][ T832] buffer_io_error: 2 callbacks suppressed [ 1250.033181][ T832] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1250.085353][ T832] attempt to access beyond end of device [ 1250.099320][ T832] loop5: rw=2049, want=70, limit=60 [ 1250.112426][ T832] Buffer I/O error on dev loop5, logical block 34, lost async page write 09:53:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000000)="0e", 0x1) [ 1250.135360][ T834] attempt to access beyond end of device [ 1250.144463][ T834] loop5: rw=0, want=64, limit=60 [ 1250.159154][ T834] Buffer I/O error on dev loop5, logical block 31, async page read [ 1250.215345][ T834] attempt to access beyond end of device [ 1250.231632][ T834] loop5: rw=0, want=66, limit=60 [ 1250.242585][ T834] Buffer I/O error on dev loop5, logical block 32, async page read 09:53:46 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1250.261442][ T834] attempt to access beyond end of device [ 1250.268623][ T834] loop5: rw=0, want=68, limit=60 [ 1250.283200][ T834] Buffer I/O error on dev loop5, logical block 33, async page read [ 1250.326477][ T834] attempt to access beyond end of device [ 1250.343812][ T834] loop5: rw=0, want=70, limit=60 [ 1250.359830][ T834] Buffer I/O error on dev loop5, logical block 34, async page read 09:53:46 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:46 executing program 4: clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x0) 09:53:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x5, 0x5, 0xfffffffffffff801, 0x1000000, 0x0, 0x0, 0x80000}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getxattr(0x0, 0x0, 0x0, 0x0) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x2) 09:53:47 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@mcast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6b524feb017f4bb6}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sec_ctx={0xc, 0x8, {0x8}}]}, 0x144}}, 0x0) [ 1250.687760][ T853] attempt to access beyond end of device [ 1250.706931][ T853] loop5: rw=2049, want=66, limit=60 [ 1250.740514][ T28] audit: type=1804 audit(1599472427.123:787): pid=853 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1229/file1/bus" dev="loop5" ino=44 res=1 errno=0 [ 1250.745610][ T853] attempt to access beyond end of device 09:53:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x50, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x2}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x50}}, 0x0) 09:53:47 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1250.899653][ T853] loop5: rw=2049, want=68, limit=60 [ 1250.905036][ T853] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1250.930961][ T853] attempt to access beyond end of device [ 1250.936618][ T853] loop5: rw=2049, want=70, limit=60 09:53:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) connect(r2, &(0x7f0000000200)=@rc, 0x80) [ 1250.949613][ T853] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1250.958191][ T861] attempt to access beyond end of device [ 1250.967018][ T861] loop5: rw=0, want=64, limit=60 [ 1250.988624][ T861] Buffer I/O error on dev loop5, logical block 31, async page read 09:53:47 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1251.000430][ T861] attempt to access beyond end of device [ 1251.006377][ T861] loop5: rw=0, want=66, limit=60 [ 1251.014515][ T861] Buffer I/O error on dev loop5, logical block 32, async page read [ 1251.041935][ T861] attempt to access beyond end of device [ 1251.047682][ T861] loop5: rw=0, want=68, limit=60 [ 1251.054056][ T861] attempt to access beyond end of device [ 1251.067220][ T861] loop5: rw=0, want=70, limit=60 09:53:47 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x0, 0x0, 0x0, 0x0, [], {0x0, 0x6, "21c1bb", 0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}, @mcast1, [@srh={0x29}], "5f93c1a94f3af47d"}}}}}}}, 0x0) 09:53:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:47 executing program 0: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x8992, &(0x7f00000000c0)="aa9069175fa7b0a7f93982b4f93a") [ 1251.355371][ T892] attempt to access beyond end of device [ 1251.361692][ T892] loop5: rw=2049, want=66, limit=60 [ 1251.369138][ T28] audit: type=1804 audit(1599472427.753:788): pid=892 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1230/file1/bus" dev="loop5" ino=45 res=1 errno=0 [ 1251.395965][ T892] attempt to access beyond end of device [ 1251.402690][ T892] loop5: rw=2049, want=68, limit=60 [ 1251.408092][ T892] attempt to access beyond end of device [ 1251.413963][ T892] loop5: rw=2049, want=70, limit=60 [ 1251.419999][ T892] attempt to access beyond end of device [ 1251.425791][ T892] loop5: rw=0, want=64, limit=60 [ 1251.431904][ T892] attempt to access beyond end of device [ 1251.437688][ T892] loop5: rw=0, want=66, limit=60 [ 1251.442876][ T892] attempt to access beyond end of device [ 1251.448640][ T892] loop5: rw=0, want=68, limit=60 09:53:47 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) ioctl$TCXONC(r3, 0x540a, 0x0) [ 1251.453852][ T892] attempt to access beyond end of device [ 1251.459624][ T892] loop5: rw=0, want=70, limit=60 09:53:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x5, 0x5, 0xfffffffffffff801, 0x1000000, 0x0, 0x0, 0x80000}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getxattr(0x0, 0x0, 0x0, 0x0) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x2) 09:53:47 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200)}, 0x9138, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r3 = gettid() r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x157) inotify_init1(0x0) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 09:53:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) ftruncate(r0, 0x0) 09:53:48 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1251.693986][ T903] attempt to access beyond end of device [ 1251.715808][ T903] loop5: rw=2049, want=66, limit=60 [ 1251.732524][ T903] attempt to access beyond end of device 09:53:48 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) [ 1251.752877][ T28] audit: type=1804 audit(1599472428.123:789): pid=903 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1231/file1/bus" dev="loop5" ino=46 res=1 errno=0 [ 1251.763725][ T903] loop5: rw=2049, want=68, limit=60 09:53:48 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) [ 1251.853286][ T903] attempt to access beyond end of device [ 1251.884025][ T903] loop5: rw=2049, want=70, limit=60 09:53:48 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1251.912030][ T916] attempt to access beyond end of device [ 1251.918217][ T916] loop5: rw=0, want=64, limit=60 [ 1251.940054][ T916] attempt to access beyond end of device [ 1251.958346][ T916] loop5: rw=0, want=66, limit=60 [ 1251.977583][ T916] attempt to access beyond end of device [ 1251.993143][ T916] loop5: rw=0, want=68, limit=60 [ 1252.005210][ T916] attempt to access beyond end of device [ 1252.025164][ T916] loop5: rw=0, want=70, limit=60 09:53:48 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) ftruncate(r0, 0x0) 09:53:48 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) [ 1252.371914][ T936] attempt to access beyond end of device [ 1252.389636][ T936] loop5: rw=2049, want=66, limit=60 [ 1252.396736][ T28] audit: type=1804 audit(1599472428.783:790): pid=936 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1232/file1/bus" dev="loop5" ino=47 res=1 errno=0 [ 1252.411011][ T936] attempt to access beyond end of device 09:53:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x5, 0x5, 0xfffffffffffff801, 0x1000000, 0x0, 0x0, 0x80000}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getxattr(0x0, 0x0, 0x0, 0x0) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x2) 09:53:48 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:48 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:48 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 09:53:48 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="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", 0xfc) futex(0x0, 0x8c, 0x2, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500), 0x2) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000b80)={0x428, 0x3f4, 0x400, 0x70bd29, 0x25dfdbfe, {0x6, 0x0, 0x23, [0x6, 0xfffffff7, 0x9, 0x2, 0x9, 0x7fffffff, 0xffffff7f, 0x80, 0x6, 0x401, 0x2, 0x0, 0x7fffffff, 0x800, 0x101, 0x5, 0x0, 0x80000000, 0x7f, 0xfffffbff, 0x5, 0x6, 0x0, 0x4, 0x0, 0x4, 0x800, 0x8, 0x0, 0x1, 0x1, 0x4, 0x0, 0x9, 0xffffffff, 0xfc0, 0xcf72, 0x6, 0x5face932, 0x8ee, 0x10001, 0x3, 0x5, 0x0, 0x0, 0x4, 0x4, 0x5, 0x2f8, 0xffff, 0x6, 0xffff0001, 0xd8, 0x2, 0x2, 0x10001, 0x7b13, 0x2, 0x9, 0x95, 0x8, 0x0, 0x2, 0xfb5], [0x40, 0x7fffffff, 0x5, 0x9, 0x4, 0x2594, 0x0, 0xf0, 0x6, 0x8, 0x0, 0xffffffff, 0xfff, 0x7, 0x3, 0x80, 0x8, 0x4, 0x30c, 0x0, 0x6, 0x5, 0xfffffff9, 0x400, 0x1ff, 0x0, 0x9, 0x4, 0x7fffffff, 0xdf1, 0x4, 0xfff, 0x6, 0x9, 0x200, 0x99e, 0x2, 0x0, 0xe45, 0x9, 0x7fff, 0x4, 0x1000000, 0x0, 0x4c20000, 0x100, 0x9, 0x8, 0x4, 0x1, 0x8, 0x3, 0x4, 0x0, 0x9, 0x6, 0x8, 0x6, 0x3, 0x51dd, 0x0, 0xfff, 0x8, 0xc1dd], [0x8, 0x401, 0x8, 0x3f0, 0x1, 0x8, 0x8000, 0x9, 0x31da, 0x2, 0x5e458da8, 0x8001, 0x1ff, 0xa62f, 0x0, 0x3, 0x6, 0x5, 0x4, 0xff, 0x0, 0x10000, 0x100, 0x2, 0x1, 0x7fffffff, 0x15f, 0xc4, 0x5, 0xfff, 0x8, 0xffff, 0x2, 0x2, 0x81, 0x1ff, 0x800, 0x3, 0x800, 0x0, 0x10001, 0x5, 0x10000, 0x72d6f8f0, 0x5, 0x1, 0x7836, 0x5, 0xfffffbff, 0x6, 0x80000000, 0x1, 0xff, 0x7fff, 0xffffff01, 0x0, 0x8, 0x8, 0xe0, 0x7fff, 0x4, 0x4, 0x7, 0xff], [0x2, 0xfff, 0x8e, 0xffffffff, 0x3fa4, 0xffff, 0x1, 0x7, 0x0, 0x7ff, 0x5, 0x9de, 0x7, 0x74fb, 0x7, 0x4, 0x5, 0xb81, 0x800, 0x101, 0x7, 0x8, 0x800, 0x7, 0x3ff, 0x1, 0x8, 0x0, 0x7894, 0xef, 0x4, 0x7, 0x10001, 0x3, 0x7fffffff, 0x10001, 0x80, 0x8, 0xebc, 0x0, 0x466e, 0x1ff, 0xb07, 0x10001, 0x100, 0x0, 0x0, 0x60000, 0x20, 0xbc, 0xff, 0x358, 0x7, 0x7, 0x6, 0x4, 0xffff, 0x4, 0x0, 0x7, 0x1, 0x8, 0x7, 0x8], 0x6, ['$-#^^\x00']}, ["", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x2000000}, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000540)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa, 0x20000, 0x200}, 0x10}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=""/204, &(0x7f0000000380)=0xcc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000140)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x490) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x40) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) [ 1252.511350][ T936] loop5: rw=2049, want=68, limit=60 [ 1252.531353][ T936] attempt to access beyond end of device [ 1252.556302][ T936] loop5: rw=2049, want=70, limit=60 09:53:49 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) [ 1252.575365][ T951] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1252.588343][ T951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=951 comm=syz-executor.2 [ 1252.601755][ T940] attempt to access beyond end of device [ 1252.607399][ T940] loop5: rw=0, want=64, limit=60 [ 1252.642719][ T940] attempt to access beyond end of device [ 1252.653715][ T940] loop5: rw=0, want=66, limit=60 [ 1252.674172][ T940] attempt to access beyond end of device 09:53:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(0xffffffffffffffff) r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) ftruncate(r0, 0x0) [ 1252.694837][ T940] loop5: rw=0, want=68, limit=60 [ 1252.700851][ T940] attempt to access beyond end of device [ 1252.711046][ T940] loop5: rw=0, want=70, limit=60 09:53:49 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:49 executing program 0: syz_emit_ethernet(0x18c5, &(0x7f0000002640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t\b\x00', 0x188f, 0x2c, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, [], {0x0, 0x6, "26a700", 0x0, 0x0, 0x0, @empty, @loopback, [@routing={0x67, 0x2, 0x0, 0xff, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x2f, 0x2a, [], [@pad1, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x8000, [0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0]}}, @pad1, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x81, 0x0, [0x0, 0x7ff]}}, @generic={0x0, 0xe6, "0f0e16cfd4f953b635c4d02bc36ed4ece9dac7d093b1e38aef8d444100516a0174f75d4790a855518d833683d3a792d6b005a02a86a9a54cd6b764d738c225a3d27550868a8142c581a63d67cd222c305097fa4d47535c2b2e1b9d3bc5fcc9b17a13ef005900005900b93e4ad5335a365239165ad6bd159e719ba7ba21ce8a204b8c7be536db66309c34cb0100000000000000fa03363fbc60e5fdd18278f9da88b86cae9e62dc77e23073b9562c9858ad98b253237096dbf6a197dbe151c30e8352ad16953808a4b60600e5e5660afe4b386571e705bde367b3871321242d12246845e3d7eb"}]}, @srh={0x29}, @routing={0x29}, @hopopts={0x2c, 0x20f, [], [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x5cad, [0x401, 0x2]}}, @generic={0x7, 0x59, "963980058235e0ac9ccb80dd2b5d0a1d1ab808d6e1ba99994d4cce7284a78cb59b92305e869ee6bc5d8d71dedeacc9e80ba6a32680fd473095e6c0db188f0e55234c33715257ff31f3b9f7af82ac71e80d1d99060587b42de2"}, @generic={0x0, 0x1000, "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"}, @enc_lim]}, @srh={0x67, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={[], [], @local}]}, @dstopts={0x16, 0x9f, [], [@enc_lim={0x4, 0x1, 0x1f}, @generic={0x0, 0x4e3, "be8e4e60480cd75b1ae29644e038762145b941377d24a66bc5ac13f4d6e33699c4d8a650f6dacf3c2d4ffa876ccd5587928d07970f62fa4d742404a9a8047b0cb1582b868c79f0af974a856cbb8865e99ce7baf914ac9b7d260d505be7a952bff8dd665208e5ddeb7244a5bea57b775c05bd013374f50cc2e44711dea65e015b9824ad5a79f995f6360cea8c78b77f4bc667e4e897ee826a0725271c909ab871d509dd1381ec6c6f2e4f3cca3395a667d0644a2bca8a090f5de510748c9ca2697321a666f0989f2cf58963564176db1c365e345f1cba9fddb331ba08d353de6201bc57825586b2273dbec175ab9141aa39bb2ea058ac57eb750cf2d0c1f76b4ee0037f2c73da4fae1afb8577840e2ed388bf81dbffd6d2a0b6fd30c05624154ca85cb5b7967a1837734591c819ae45f5bd1f4a8972551134bece9b4c1fe9c82357d1d0b4ac50d8db094f09705c6c36eb6a4cc70997c82a359d75d56a652b9d0ffc0a6a5d8f3e0a875bddd540ab0942340d6c4361e509561bb2bed58025541c5a383ae53160a1ef7e69118503e1b6a7bd10ed6dbe470d95ddb95c8434b61bbb075f0e81d6f0b2b00f258addeffc74b0e0a18c75c4fb80d8d13b90341b299e862fa8e5cadfff94efb612eae06d5291e53c6a061bb0d90d59c0e74b479e26a3f62d2ba34e5c73e68d3e7f63deb27ea04bcae2b9c436808c14b58f837cb2e176418f24fd01d1e07dd0045d22315101e8e66239e8a9fb55ad171365a7137021d56a872ecfddf1907bd3ea689d2f152eebad46c563dad796050fbac3a4888624fb4e17055b394b917ae9904941f36bd2f6a411aae8580d22fbd7d8dacd67226ef884f579b8ad0f156f23451734b9b5a2dc4ce3c93e41e78235a9cf346fd2ab23e1a2060cb4bc3a3cb546836aac46414d7bdcafe740d1f4935aef63a36dbb2e075cc258153b73fa3737bc2d273ec940bc1c0557ee1a0895838c30d61c76e5c4984f33a9be07df7eaad86b4a16e04fd996a0fa8bedaa193ed40c57d3fe23c987cc54ed7d61186194aa6f0390ccd1d7bf56a6eebc950f8ce64af5509564a6806f4d371221d3bfcd4622ecfb4305cc4db04788dd11f36e28cc5ce98d2ee96d96beeea4515983e04e9a94f4d90d9cc9fe55e7fdf2a1e6632ff9ac2f59871b23a502680c4dae031ce52f5e482c4d78841a341766a587d334fc92f8e9655f9c3b12b5633e4485152a14cbe872aaf1d45f44eb309dcc0db5fb94ace6e710da4348f510dab728f4407ef5d8619a6d1d14c537ec5969d66025573e2e904de9055205f9652b169f3380b7f57e456b36f8b2acde179b3e482da5dc440bc3626d5aa2fda82e6b5a2b0162587898d48d148cb4f1b690cddb8341150268c48801f31d09eb61742eb3fb33c5d2db79e0c38ac0e48426aa3d7311fe6acfd6a8a2404cbcec51058edb12ad4eca16e67d99fa04762041967de4fd17b4ad4984c8c6fabd37d339e7764ecdb885f7bd4d28614ba09f18cadbe84fd3e0bc609f9128a7edb5c058e46725f8dd2b1d4434bfa2df3a6ed9ebf9d624a3b3d63068c75366bc73fdbcd0f536fcaa59f5ca85d405dc10c8edc381cd8d139d49a07e6dbe266a7800860f99e8d066c19b25fbdc92ed2428bad17977735d23fb88feed581a568bdd715430c29c4b5ce8a880dbbc5fa2cfa879dd33464671cb5bcf27491cd9c5177a1c4411c519ce4c101f34c2e552ec5a7ae6a8858f5cb34b0ab83df440a43ffacd7d5d48fb869dda7270e190f5d13c"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @dstopts={0x3b, 0x9, [], [@generic={0x40, 0x8, "02d010c6ec1dd0c0"}, @generic={0x0, 0x1f, "6e6b25c062be95d29b48a6890a19edae358f1113a08f604bfc87ebeacfa3b6"}, @enc_lim, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x80, 0x40]}}]}], "aa0236adeb9a11cdfb843bd2f933bf97c9de38bd738dd21d49656a5957e6a02f0ca61d83876d6521aca45558f5fd2398aa89e53cc1ecd90e31e0ac21df6ce39817cb8f3a9797a573e3f2f543548803b7443743982bc12e6c3d24b8c25b0be92d8705ac891af021f87b315ca8d416288f91723fb5569985aee804d2d5122d2f90a145123faf76425295799305cbe3cee875feec4834c433dace9015621308deeca7d7264d0b99e7d4f54bad6e49f617adaa262c5555eca007a1e0fce4b42bde81c18d062ba882b0e1ef463d6406a2c33555aeb46d08410a05c8b556bc5898ea"}}}}}}}, 0x0) 09:53:49 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="bb60a9458428bd7213182bb47985", 0xe, 0x0, 0x0, 0x0) 09:53:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000200)={0x60}, 0x60) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000103c0)="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", 0x2000, &(0x7f0000000800)={&(0x7f00000000c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:53:49 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1252.952944][ T967] attempt to access beyond end of device [ 1253.008037][ T967] loop5: rw=2049, want=66, limit=60 [ 1253.043355][ T28] audit: type=1804 audit(1599472429.433:791): pid=973 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1233/file1/bus" dev="loop5" ino=48 res=1 errno=0 [ 1253.070732][ T973] attempt to access beyond end of device [ 1253.076625][ T973] loop5: rw=2049, want=68, limit=60 [ 1253.091655][ T973] attempt to access beyond end of device [ 1253.098609][ T973] loop5: rw=2049, want=70, limit=60 [ 1253.115307][ T967] attempt to access beyond end of device [ 1253.123871][ T967] loop5: rw=0, want=64, limit=60 [ 1253.144277][ T967] attempt to access beyond end of device [ 1253.166281][ T967] loop5: rw=0, want=66, limit=60 [ 1253.176845][ T967] attempt to access beyond end of device [ 1253.191792][ T967] loop5: rw=0, want=68, limit=60 [ 1253.204187][ T967] attempt to access beyond end of device [ 1253.213396][ T967] loop5: rw=0, want=70, limit=60 09:53:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r0, &(0x7f0000000180)=@un=@file={0x0, './file1\x00'}, 0x80) 09:53:49 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:49 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:53:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) ftruncate(r1, 0x0) [ 1253.382623][ T954] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1253.393999][ T987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=987 comm=syz-executor.2 09:53:50 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000080)="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", 0xfc) futex(0x0, 0x8c, 0x2, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500), 0x2) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000b80)={0x428, 0x3f4, 0x400, 0x70bd29, 0x25dfdbfe, {0x6, 0x0, 0x23, [0x6, 0xfffffff7, 0x9, 0x2, 0x9, 0x7fffffff, 0xffffff7f, 0x80, 0x6, 0x401, 0x2, 0x0, 0x7fffffff, 0x800, 0x101, 0x5, 0x0, 0x80000000, 0x7f, 0xfffffbff, 0x5, 0x6, 0x0, 0x4, 0x0, 0x4, 0x800, 0x8, 0x0, 0x1, 0x1, 0x4, 0x0, 0x9, 0xffffffff, 0xfc0, 0xcf72, 0x6, 0x5face932, 0x8ee, 0x10001, 0x3, 0x5, 0x0, 0x0, 0x4, 0x4, 0x5, 0x2f8, 0xffff, 0x6, 0xffff0001, 0xd8, 0x2, 0x2, 0x10001, 0x7b13, 0x2, 0x9, 0x95, 0x8, 0x0, 0x2, 0xfb5], [0x40, 0x7fffffff, 0x5, 0x9, 0x4, 0x2594, 0x0, 0xf0, 0x6, 0x8, 0x0, 0xffffffff, 0xfff, 0x7, 0x3, 0x80, 0x8, 0x4, 0x30c, 0x0, 0x6, 0x5, 0xfffffff9, 0x400, 0x1ff, 0x0, 0x9, 0x4, 0x7fffffff, 0xdf1, 0x4, 0xfff, 0x6, 0x9, 0x200, 0x99e, 0x2, 0x0, 0xe45, 0x9, 0x7fff, 0x4, 0x1000000, 0x0, 0x4c20000, 0x100, 0x9, 0x8, 0x4, 0x1, 0x8, 0x3, 0x4, 0x0, 0x9, 0x6, 0x8, 0x6, 0x3, 0x51dd, 0x0, 0xfff, 0x8, 0xc1dd], [0x8, 0x401, 0x8, 0x3f0, 0x1, 0x8, 0x8000, 0x9, 0x31da, 0x2, 0x5e458da8, 0x8001, 0x1ff, 0xa62f, 0x0, 0x3, 0x6, 0x5, 0x4, 0xff, 0x0, 0x10000, 0x100, 0x2, 0x1, 0x7fffffff, 0x15f, 0xc4, 0x5, 0xfff, 0x8, 0xffff, 0x2, 0x2, 0x81, 0x1ff, 0x800, 0x3, 0x800, 0x0, 0x10001, 0x5, 0x10000, 0x72d6f8f0, 0x5, 0x1, 0x7836, 0x5, 0xfffffbff, 0x6, 0x80000000, 0x1, 0xff, 0x7fff, 0xffffff01, 0x0, 0x8, 0x8, 0xe0, 0x7fff, 0x4, 0x4, 0x7, 0xff], [0x2, 0xfff, 0x8e, 0xffffffff, 0x3fa4, 0xffff, 0x1, 0x7, 0x0, 0x7ff, 0x5, 0x9de, 0x7, 0x74fb, 0x7, 0x4, 0x5, 0xb81, 0x800, 0x101, 0x7, 0x8, 0x800, 0x7, 0x3ff, 0x1, 0x8, 0x0, 0x7894, 0xef, 0x4, 0x7, 0x10001, 0x3, 0x7fffffff, 0x10001, 0x80, 0x8, 0xebc, 0x0, 0x466e, 0x1ff, 0xb07, 0x10001, 0x100, 0x0, 0x0, 0x60000, 0x20, 0xbc, 0xff, 0x358, 0x7, 0x7, 0x6, 0x4, 0xffff, 0x4, 0x0, 0x7, 0x1, 0x8, 0x7, 0x8], 0x6, ['$-#^^\x00']}, ["", "", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x2000000}, 0x8000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000540)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x11a20100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350600000fff07006706000002000000070300000ee60060bf050000000000004f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be9525db67754bb12feffffff8ecf264e0f8492b80482f48821a0d2d17f2f1754558f2278af6d71d79a5ed8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3ffff369289aa6812b8e007e733a9a459788b9c37931bdba010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955cfa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab70100010000000000d04acd6002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d75ec88158f0200000000c8fb735fd552bdbcfdcc39598068551a7c291c3770e335c206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ce2ac16f64ea7b0ef3b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401c3738270b31dd362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f9d2001e038451bb96589a7eab04871bc47207cd313f00000000000000407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a61434b0c94cce699452050000000000000026a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea6a58bc3eeed729a2f95e1d6a1fc357b27990f51d33cd1bdf3dbcdf1c2cbb82ce8605abd094d3c495483186eef5cb247aa410dd86f07ea7ba5cded1f8fc47de13d2ba17b1e608cc3067aa5e2460900d472c275cc1dcd46a6321be36dd5342da5989dcc8c1e9ed32eb08bfbd9f7a4a1c63020a8d6d9662b3bc89140a6a36413f13d9536247ba66eb701a30744debfe69126c3f54250d7b3639e13f8df6ff262b2ce045b032abe1e891c50201e114e8c2ac0c274597e183953d823bc92acff3fbeb58c4ea7a9eb3c19ed601fe598919857bbdf0ce8de1a9cd06453ff86bb9b29844fd9f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa, 0x20000, 0x200}, 0x10}, 0x78) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=""/204, &(0x7f0000000380)=0xcc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000140)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x490) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3}, 0x40) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 09:53:50 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:53:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='l'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003780)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x7}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0) [ 1253.567298][ T997] attempt to access beyond end of device [ 1253.595826][ T997] loop5: rw=2049, want=66, limit=60 [ 1253.632414][ T28] audit: type=1804 audit(1599472430.023:792): pid=1002 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1234/file1/bus" dev="loop5" ino=49 res=1 errno=0 [ 1253.665040][ T997] attempt to access beyond end of device 09:53:50 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) [ 1253.686886][ T1006] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1253.706379][ T997] loop5: rw=2049, want=68, limit=60 [ 1253.709901][ T1006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=1006 comm=syz-executor.2 [ 1253.756271][ T997] attempt to access beyond end of device [ 1253.784210][ T997] loop5: rw=2049, want=70, limit=60 09:53:50 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) readv(r0, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000400)=""/111, 0x6f}], 0x2) [ 1253.808437][ T1002] attempt to access beyond end of device [ 1253.815654][ T1002] loop5: rw=0, want=64, limit=60 [ 1253.841205][ T1002] attempt to access beyond end of device 09:53:50 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) [ 1253.859720][ T1002] loop5: rw=0, want=66, limit=60 [ 1253.884465][ T1002] attempt to access beyond end of device [ 1253.903011][ T1002] loop5: rw=0, want=68, limit=60 [ 1253.928303][ T1002] attempt to access beyond end of device [ 1253.956502][ T1002] loop5: rw=0, want=70, limit=60 09:53:50 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80000000000002, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030009160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000ff02000000000000000000000001000000000000000004000400000000000000000000000000000000000000000000000000000000000200010000000000000000030000000005000500000000000a0000000000000020"], 0xb0}}, 0x0) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000002200", 0x6) splice(r0, 0x0, r1, 0x0, 0xffff, 0x0) 09:53:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x0, 0x1) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1c, &(0x7f0000000000), 0x20a15608) 09:53:50 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa1000006, 0x0) 09:53:50 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) 09:53:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009, 0x8}, 0x40) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000002c0)={r0, 0x0, 0x0}, 0x20) 09:53:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) ftruncate(r1, 0x0) [ 1254.090834][ T28] audit: type=1800 audit(1599472430.463:793): pid=982 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1254.208863][ T28] audit: type=1800 audit(1599472430.463:794): pid=1024 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="/" dev="fuse" ino=1 res=0 errno=0 09:53:50 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x458, 0x138, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x0) 09:53:50 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 09:53:50 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0) 09:53:50 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, 0x0, 0xa1000006, 0x0) 09:53:50 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd", 0x7, 0x0, 0x0, 0x0) [ 1254.404107][ T1042] attempt to access beyond end of device [ 1254.435788][ T1042] loop5: rw=2049, want=66, limit=60 09:53:50 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x2, [@union={0x0, 0x8, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}}, 0x0, 0x106}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1254.510259][ T28] audit: type=1804 audit(1599472430.903:795): pid=1056 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1235/file1/bus" dev="loop5" ino=50 res=1 errno=0 09:53:50 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, 0x0, 0xa1000006, 0x0) 09:53:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) ftruncate(r1, 0x0) 09:53:51 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd", 0x7, 0x0, 0x0, 0x0) 09:53:51 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 1254.669293][T10413] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1254.681288][ T1068] ptrace attach of "/root/syz-executor.0"[1067] was attempted by "/root/syz-executor.0"[1068] 09:53:51 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 09:53:51 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, 0x0, 0xa1000006, 0x0) [ 1254.877969][ T1075] attempt to access beyond end of device [ 1254.883852][ T1075] loop5: rw=2049, want=66, limit=60 [ 1254.901513][ T28] audit: type=1804 audit(1599472431.293:796): pid=1075 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1236/file1/bus" dev="loop5" ino=51 res=1 errno=0 [ 1254.902578][ T1075] attempt to access beyond end of device [ 1254.934776][ T1075] loop5: rw=2049, want=68, limit=60 [ 1254.941557][ T1075] attempt to access beyond end of device [ 1254.948176][ T1075] loop5: rw=2049, want=70, limit=60 [ 1255.039961][T10413] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1255.083438][T10413] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40 [ 1255.117123][T10413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.152801][T10413] usbip-host 3-1: 3-1 is not in match_busid table... skip! 09:53:53 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000003c0)=""/208) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) fadvise64(r1, 0x7800, 0x0, 0x4) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x0, 0x4) 09:53:53 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd", 0x7, 0x0, 0x0, 0x0) 09:53:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:53 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0x0, 0x0) 09:53:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x62, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) 09:53:53 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 1257.354411][T30575] usb 3-1: USB disconnect, device number 5 09:53:53 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182b", 0xb, 0x0, 0x0, 0x0) 09:53:53 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0x0, 0x0) [ 1257.506831][ T28] audit: type=1804 audit(1599472433.894:797): pid=1106 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1237/bus" dev="sda1" ino=16361 res=1 errno=0 09:53:54 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653078000053c27bc3276003639405cb4aed12f0000006edc00278dcff47d01000080ca99f847605e03127172c61d79cf4dd76745a4298063acf2678cef3380b9ea5c364f0e78fc064d8a3a9a14e7b2738e4907dc4e4c672d0f00c2f009b6d2a78423354046e32f08cac9559d76", 0x6e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 09:53:54 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local}]}}}]}, 0x40}}, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r1) 09:53:54 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2a) [ 1257.746338][ T1123] ptrace attach of "/root/syz-executor.0"[1120] was attempted by "/root/syz-executor.0"[1123] 09:53:54 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182b", 0xb, 0x0, 0x0, 0x0) [ 1258.397742][ T28] audit: type=1804 audit(1599472434.784:798): pid=1124 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir433454752/syzkaller.5CNtB7/1322/bus" dev="sda1" ino=15774 res=1 errno=0 [ 1258.446163][ T28] audit: type=1804 audit(1599472434.784:799): pid=1118 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir433454752/syzkaller.5CNtB7/1322/bus" dev="sda1" ino=15774 res=1 errno=0 09:53:54 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0100ce1d0efa2b89aadf1fd4d498e7beb7"], 0x2}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x25) 09:53:54 executing program 0: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000f00)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @loopback}, @rand_addr=' \x01\x00'}}) [ 1258.497482][ T28] audit: type=1804 audit(1599472434.794:800): pid=1127 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir433454752/syzkaller.5CNtB7/1322/bus" dev="sda1" ino=15774 res=1 errno=0 09:53:54 executing program 4: clone(0x22080080, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) waitid(0x0, 0x0, &(0x7f0000003ff8), 0x0, 0x0) 09:53:54 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182b", 0xb, 0x0, 0x0, 0x0) 09:53:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r2, &(0x7f0000000100)=""/236, 0x18) getdents64(r2, &(0x7f0000000040)=""/40, 0x28) 09:53:54 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1258.657251][ T28] audit: type=1804 audit(1599472435.044:801): pid=1146 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1238/bus" dev="sda1" ino=16364 res=1 errno=0 09:53:55 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f1b6df086a080200c5670000000109022400010000000009040200023c09000009050112080700000009058c", @ANYRES64], 0x0) 09:53:55 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb479", 0xd, 0x0, 0x0, 0x0) 09:53:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x5, 0x0, 0x0) 09:53:55 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 09:53:55 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb479", 0xd, 0x0, 0x0, 0x0) 09:53:55 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8994, &(0x7f0000002400)={'team0\x00'}) 09:53:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000500)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) [ 1258.982230][ T1168] ptrace attach of "/root/syz-executor.2"[1165] was attempted by "/root/syz-executor.2"[1168] 09:53:55 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb30, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f0000000400)="bb60a9458428bd7213182bb479", 0xd, 0x0, 0x0, 0x0) 09:53:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002e80)={0xffffffffffffffff, 0xffffffffffffffff}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x14}, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) [ 1259.149017][T30575] usb 4-1: new high-speed USB device number 4 using dummy_hcd 09:53:55 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="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", 0x11e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 1259.388858][T30575] usb 4-1: Using ep0 maxpacket: 8 09:53:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_ID={0x1, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2e}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8940}, 0x30044860) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0xb03, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) [ 1259.446978][ T1198] ptrace attach of "/root/syz-executor.2"[1197] was attempted by "/root/syz-executor.2"[1198] 09:53:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1259.509575][T30575] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1259.517827][T30575] usb 4-1: config 0 has no interface number 0 [ 1259.546258][T30575] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x1 has invalid maxpacket 1800, setting to 1024 [ 1259.576208][T30575] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1259.600718][T30575] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has an invalid bInterval 255, changing to 11 [ 1259.640540][T30575] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x8C has invalid maxpacket 2047, setting to 1024 [ 1259.692529][ T28] audit: type=1804 audit(1599472436.074:802): pid=1206 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1239/bus" dev="sda1" ino=16367 res=1 errno=0 [ 1259.699625][T30575] usb 4-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 1259.732987][T30575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.749900][T30575] usbip-host 4-1: 4-1 is not in match_busid table... skip! 09:53:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB='l'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x40}}, 0x0) 09:53:58 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0xa}]}, &(0x7f0000000540)='GPL\x00', 0x4, 0xf1, &(0x7f0000000340)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:53:58 executing program 4: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x2}) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000ec0)=""/202, 0x1fd000}], 0x1, 0x0, 0x0) dup2(r1, r2) 09:53:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffdc0, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @local}, 0x4a) recvfrom(r0, &(0x7f0000000100)=""/90, 0xffffffffffffff5e, 0x1010c, 0x0, 0x38) 09:53:58 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="77cf07aec10100000000000000cafae0e6b27dd9cfb41c7851060054a8aee79c5034174a3270e7ff570e14a410156c5ddd8af3aeee11b88a9b55e6bbe3c87ec4dfae39e2f5e70ec00e31d70b91eacf180c3e59b80be0000000"], 0x0, 0x0) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="230228efb4a24fe84689000080cb000000005d6fe0eb92552fba4784466ebedbcc3e06000000000000006c0e09d1ede6c1f37b9c352ef85a00004380a8cf359a30a74dc68c37cfbe8808000000000000997208002a74e3e6236e1882c601f2b49e32098f6919c7234cebfe065d74f205005de2be4e7b3881c92986a5aba82763b2d64194569196560b10d425ddd904000000000000004b03ba4b656f9029509bed808f4aa86c8dc50de43149543b9124af5e9ccd3c36c416e6ba34d30721fec6933bef175b6dcfcb5c2c428f750e12bf08cf6a46df9b9e5b00c8de1d6687f10b410b852cc7c6dba25ce854d650dc3a13984b627b85d0809e6a420000a9027b413acacb65253484b86864a9a35fa81fd34083873063604893b9890834b01bee1f2d34137b74920371226fd9e796f5586d354ba2edab762282359053a77689cb44982409000000f10fba67eb000dbbd15658dca7369052f97b8caebd4786bce825d47510a349a27b00000000000000000000000000003ae9aaacb2c6eb2ecd04979b7869f8a7cdf5f079861a964036381305ff8a9f4e7e645ac443ce61c54b95fd12d059fa37e1c4770b39ac61c3ea62c09838969753e7e15fcc1d6c1a40781864d1d90000000000c15aea9f836279c9c14009168d44292afe9e17259488c3da689c013a00a59990354ff96b99814834ed6ec4bdd0b0d7a88240841505ec2788805d0cf5aa423c10ff0579d1d25fa785cd120bc07457455a0a996cbed1d1c5bc13d3fe9824f7fc7d825b9b0b3c45d4d6217371753284a22c97e27a85956153cde4bddece070a49e8802d26fe68417bfb198507103762aa640317c9ddcd51158152010ac6c05fa138f5c30edae7fb23c3760e2b637b6fdb32c2ee5aac3ff445143b1bff2c7627e6231ec99fe89e1c36"], 0x187) inotify_init1(0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 1261.835889][T30812] usb 4-1: USB disconnect, device number 4 [ 1261.936790][ T1243] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1261.948191][ T28] audit: type=1804 audit(1599472438.324:803): pid=1241 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1240/file1/bus" dev="sda1" ino=16360 res=1 errno=0 [ 1262.022644][ T1251] ptrace attach of "/root/syz-executor.0"[1248] was attempted by "/root/syz-executor.0"[1251] 09:53:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x1e, &(0x7f0000000000), 0x20a154cc) 09:53:58 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:53:58 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0, 0x0) 09:53:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001480)=ANY=[@ANYRES64=0x0, @ANYBLOB="1fe4382d00000000080000000000000007006404b2adb3f900000000000005f33af223d74034d000000000000000173d000000000000000ff30008000000a73800003b0b0000060000000000000003000700000000003f0000000000000004000000000000002000000000000000000000000000000000000000000000000000000000000000000000d30000000067bed8d35a687f1fb67a5b3af70f43242c8efd7dc57f8298fb6d"]) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000001440)={0x1, 'macsec0\x00', {}, 0xd6}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000180)={r3, 0x8}) poll(&(0x7f0000000000)=[{}, {}, {}], 0x2000000000000272, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r6, &(0x7f00000012c0)="f99713a308fa42dd99fbf7434f0c9f19d8de25915d9182a16f27c448750f3e677a63e76a63a98e1b51266af2a68c27a3b029e67eeb8fd8e95d385c1c160018d874de2af2be19317cf1e4019a74c27f3e34ae9cedd7cce9469a4f3e99aab21db3987244ea4e814526332d7593a6e76170fe373b94e00d956edceed2423ad868ef5b3d1b9fefb0919f56dfa4ae1b349ea1afa0d7164069679c865d593efcec1af94de76b49ee1952a04564ea29f7862e8b6041c69c8065ae2e31be0444f8326686dc27", &(0x7f00000013c0)=""/67}, 0x20) r7 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, &(0x7f0000001180)={0x4, "314c5b51f92722825e40673677f0200175f53b3c6157c9a64f71843d8228f74011192219dac806108e978be0a9c110b20e0f64293dee432b4e066175e23ed903951ed32713ea4147837649d2f0ba82705dae755552fe56a732a961b88dc53f7563ba6db299dac697cf29385d7544cdbde325048df9a5802fa86e901289e03452934b2a7083aa4974e6ba7b0c9849a49f1ca3936d046d9ef72832ae766f12672ec762ce8c6bddb7ea7110a1df0d696a94d3630af6e6bcf5e3a8bdd6d5a63987da55177fc22f352027a16abbf791a439eb5fe0be19b708db9e601b910adfdab698878a90126418c0bc7b1783a08fd07d1174e2882d08e7f3f3c8cbc1ce71256554"}) [ 1262.411790][ T28] audit: type=1804 audit(1599472438.804:804): pid=1266 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1241/file1/bus" dev="sda1" ino=15857 res=1 errno=0 09:53:59 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x0) read$usbmon(r0, 0x0, 0x30000000) 09:53:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002100)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff1d460500000000004504040001ffffffc604000001000000b70500000000e000720a23fe00000000850000000a000000b70000000000000095000000000000004e6258941c823b7505608756ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ec0ea4334844d2322e8965c79435883df6c10ce86188c92292b2d0226082960be682836bdff860971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da098ef78dffcff5e1ed19913a5fb25c79dac2e489f681278926581f9e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517e92c26637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba04a978f41e8ed4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e7171094018630366397266090a12343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d80810da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c95524c85df0952d32093082b7aa71304e0d2d9cc310d1b676b378a5879e47941de1a28c3a8f4be28628bd443537d0e032b7d2badd0bc6617a859b7ac273b63040000006f43291829030f06cc0ca1765838eb5590264736fbccfc3a8f10daf6a275daf5db2dac70b0fedb05e68d0300000073ce6b144503d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6636b354b6e674b08f7b7f72bd7dbc96aef53be267d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e0711d759fc5a9c441a8fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207de07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330713045eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297dbe34264c8c70b7761b22a7114a078a87d63d6ba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681f92a2d0e1e8e38ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bbbace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1527370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158078b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a9302eb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddccce8f3ba739d90ddc5d62a85f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f708ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69ff1ce9626de9847bf53475d90642d973c654d80b1b99b466e2e9ec660ee99ae2e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) 09:53:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xff01) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup(r1) getsockopt$netlink(r2, 0x10e, 0x3, 0x0, &(0x7f0000000000)) 09:53:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0x400000008d}, 0x0) r0 = getpid() sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="e3000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf2506000000b0000180130001006574683a73797a6b616c6c657231000044000400200001000a004e24000000082001000000000000000000000000000189110000200002000a004e2000000009fc01000000000000000000000000000101000000340002800800040003000000080001001900000008000400ccad000008000200080000000800020005000000080001001d0000000800030004000000100001006574683a6970766c616e300008000300000400000c0002800800020048000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000040}, 0x4001) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_FPEXC(0xb, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="2d29384d3c8d4287688575ee6adec24f3eff1d5e75438ddf67914018ca0deb6e6931175faaeaedcf20f638f348bfe5c112918a4db8831a77e104ff64f5a78311219858d7d12f57f046b6f61194f5addb0d9729967d124f3f389512fe59036854aeb259e59fac7980b0faeb068eaf6a6b5f41148232581daffc9ee958baf15c17af488e06528eaab2fcfcde47b1b5c62d7fe95c1d5051ae8cd7826f9c90d4ca9b15ea0810a9142556cd7603553f0dc25f969c242ad0265948ecbe48904b94d9c9569f2aadf9e3fdc5799119e0e337573624b810ae5a009010012a630fa3636eaeb917c044d0e513126512ace327b2b7de2985788a72be3975de604a09d577c21d88dfdd8f", @ANYRES64], 0x35) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={0x0}, 0x4a2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x6000000, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0090e0f38c"]) 09:53:59 executing program 3: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="eb3d90", 0xfffffff0}], 0x7c00, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 09:54:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x39, 0x0, &(0x7f0000000000)) 09:54:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0xe4}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/136, 0x88}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4aeb}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x50000124, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[], 0x26}}, 0x14) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000fc853db686f791381e5d09f534"], 0x38}}, 0x0) 09:54:01 executing program 0: perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 09:54:01 executing program 5: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$tun(r0, &(0x7f00000019c0)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x45}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0x62) 09:54:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1) write$tun(r0, &(0x7f0000000700)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote, @local}, {{0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0x62) [ 1264.990687][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1264.998532][ T1323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1265.012672][ T1323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1265.107920][ T28] audit: type=1804 audit(1599472441.494:805): pid=1321 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1242/file1/bus" dev="sda1" ino=16377 res=1 errno=0 [ 1265.151249][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1265.156377][ T1341] IPVS: ftp: loaded support on port[0] = 21 [ 1265.169641][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1265.190372][ T1330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1265.249216][ T1341] lo speed is unknown, defaulting to 1000 09:54:01 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1e0, r2, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x40804) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='\xaa\xa7f\x98\xb4\xee\xb9!u\x7f]\x04\at\xaa\xbb\xe9\xde\xa3k\xf3\x10Hq1\xcf\x8f\xd3&\xe7\xb4s \xde\xa6\xc2\xbel4\xdc\x93\xce`dd\x8d\xaaQA\x01$\xcbF\xea\x98?:\xcf}ULn\xdc\xce\xbaD\x17\xfd0R\xbc\xfb\xec\x16\xbe\xca\xe5\x8e\xfb\x85\xcbg\xf5\x00\xbb\xce\x17~\xed1\xebi\xc2\x04\xbcc\x95\xf7$%\xc4HZ\xfc\x970\xf5l\"\x92\x82\xd2\xb9\xaa\xd5\xea\x9c\f\x9bZ\xb4\x04G\x97\x99\xb9\xe8\xcd\xfb\xbfw\xc3^\xb1\xeec\t\xf6\x1cH\xbc,\x84O\xc8\xd6\xa2.\xf49q\xe3', 0x0) write(r3, &(0x7f0000002000)='/', 0x1) syz_genetlink_get_family_id$nl80211(0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000780)="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"}, 0x20) io_submit(0x0, 0x0, 0x0) sendfile(r3, r3, &(0x7f00000001c0), 0xfec) [ 1265.343551][ T1329] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:54:01 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000100)={0x7, 0x0, 0x9, 0xffffffff}) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000b40)}}], 0x1, 0x120, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_FPEXC(0xb, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x35) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x7}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0xf, 0x0, @thr={&(0x7f0000000480)="3baa9b7d4eab25a62d3527e13feb3f151b6737e1541b48322fbbd9ff7afe2cae449d8eb5d6beaf1a32e0135ce6d09e360cf2b6baddf087af411d19cf33665b8020f4ed052c3b1e4b23a7f98f42db1994786329f1f8f3cf996ea243ada2d1dbe2301e4cd81f9f9a57332ba4f9e59e816450ba18962b53bb6a04fa3df52942c78c9165a21c659c81c60068be70d2a73637b05a69fdb5c373e1e8ebf5356ef7f5187f17ddc69a7859007e0e7c58efa67135bfaed5fd", &(0x7f0000000600)}}, &(0x7f00000003c0)) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, 0x0, &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="34726f6f746d6f64653d30303030303030303030303030303505387ac4ece881302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='smackfshat=fd,fo', @ANYRESDEC, @ANYBLOB=',context\nucer_u,uid', @ANYRESDEC, @ANYBLOB="18"]) [ 1265.536503][ T1329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1265.801629][ T1358] overlayfs: unrecognized mount option "smackfshat=fd" or missing value [ 1265.921797][ T1360] IPVS: ftp: loaded support on port[0] = 21 09:54:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x9, 0x209e20, 0x2, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000400), &(0x7f0000000240)=""/63}, 0x20) [ 1266.615183][ T1360] lo speed is unknown, defaulting to 1000 09:54:04 executing program 1: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x7a, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r1, 0x40) 09:54:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0xe4}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/136, 0x88}}], 0x1, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4aeb}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x50000124, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[], 0x26}}, 0x14) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000fc853db686f791381e5d09f534"], 0x38}}, 0x0) 09:54:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:04 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x68001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}) [ 1268.409204][ T186] tipc: TX() has been purged, node left! [ 1268.415603][ T186] tipc: TX() has been purged, node left! 09:54:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r4) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="a0000000320001000000000000000000000000008c0001000c001700070001007874000010000f0009000100766c616e000000002c000100080003"], 0x1}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) [ 1268.517221][ T1425] ptrace attach of "/root/syz-executor.1"[1424] was attempted by "/root/syz-executor.1"[1425] [ 1268.590801][ T1427] IPVS: ftp: loaded support on port[0] = 21 [ 1268.688632][ T1427] lo speed is unknown, defaulting to 1000 [ 1268.768167][ T28] audit: type=1804 audit(1599472445.075:806): pid=1426 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1243/bus" dev="sda1" ino=16381 res=1 errno=0 09:54:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ftruncate(r1, 0x40) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "008000000000000000cd000000ddc1517600"}) 09:54:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0xa, &(0x7f00000001c0)={0x77359400}) [ 1268.977554][ T1447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1447 comm=syz-executor.2 [ 1269.133352][ T1447] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1269.225887][ T1447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 09:54:05 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1270.028084][ T28] audit: type=1804 audit(1599472446.335:807): pid=1459 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1244/bus" dev="sda1" ino=16373 res=1 errno=0 09:54:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1) write$tun(r0, &(0x7f0000000700)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote, @local}, {{0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0x62) 09:54:06 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ptrace(0x10, r0) 09:54:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x1000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) pipe2(&(0x7f00000000c0), 0x80000) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7201a960632ed46b0fde8aad6bba45825a570e80e9649fced16db574dd5a49d3145698a6e6995b025f1e868d25", @ANYRES16, @ANYRES64=r5], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc02c8d0}, 0x880) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010102}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x0) 09:54:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x9, 0x2, 0x10000, 0x5, 0x3, 0x0, 0x0, 0x1cc9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f00000000c0), 0xf}}, 0x0, 0xfffeffffffffffff, r1, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="230228efb4a24fe84689000080cb000000005d6fe0eb92552fba4784466ebedbcc3e06000000000000006c0e09d1ede6c1f37b9c352ef85a00004380a8cf359a30a74dc68c37cfbe8808000000000009997208002a74e3e6236e1882c601f2b49e32098f6919c7234cebfe065d74f205005de2be4e7b3879c92986a5aba82763b2d64194569196560b10d4d382d904000000000000004b03ba4b656f9004009bed808f4aa86c8dc50de43149543b9124af5e9ccd3c36c416e6ba34d30721fec6933bef175b6dcfcb5c2c428f750e12bf08cf6a46df9b9e5b00c8de1d6687f10b410b852cc7c6dba25ce854d650dc3a13984b627b85d0809e6a420000a9027b413acacb65253484b86864a9a334b01bee1f2d34137b74920371226fd9e796f5586d354ba2edab762282359053a77689cb44982409000000f10fba67eb000dbbd15658dca7369052f97b8caebd4786bce825d47510a349a2ceeb4c81069349d6000000000017003ae9aaacb2c6eb2ecd04979b7869f8a7cdf5f079861a964036381305ff8a9f4e7e645ac443ce61c54b95fd12d059fa37e1c46f0b39ac6121d6a805c3ea62c09838969753e7e15fcc1d6c1a40781864d1d90000000000c15aea9f836279c9c14009168d44292afe9e17259488c3da689c013a00a59990354ff96b99814834ed6ec4bdd0b0d7a88240841505ec2788805d0cf5aa421e23ff0579d1d25fa785cd120bc07457455a0a996cbed1d1c5bc13d3fe9824f7fc7d825b9b0b3c45d4d6217371753284a22c97e27a85856153cde4bddece070a49e8802d26fe68417bfb198507103762aa640317c9ddcd5115814f57d16a71fcda893145bb912b6a5e52010ac6c05fa138f5c30edae7fb23c3760e2b637b6fdb32c2ee5aac3ff445143b2bb99313651eef14445b5fbc1bff2c7627e6231ec99fe89e1c36e001e2f4947390173cd63e1206ff18b12d7d7422a13c0e23fa70811cf246b2a20b7febb71ce1ee4f42aa0c149cabd9fd61279be7c4f43fa0e8022f56c8e662f076182ce2aa3f2181ced1d97ad6c36b3304b91431767aa3c7f71276a464e7d950a60dcae94bee6761b5d3f361780f3608a920d816413945c7805a0f3afc9c5abbda9dfadc693366e7b92704929aa1c54de07153ae9b0e5ce3d6ea673a3789421c4dbb14af85db58008460d9a695f3c769ab551016d82f67e79fec9d1716c526913ee09e276b9c83b1b9f2b0d53857955e454b2f79c6981031c7c39d10e33667d030d5e8ab4245238967928cecf1a784df7dce38e00f21a41ebfd7e5c83da00949059f625de9f9dc59e6ca1639715452f9c66f9f74bf5d67e259348b8f3061cda20d3fb09b2c459dfa58b325d8750d21931075e72909c829f05adfd4f280e338ab414b44162aa7ffdb209935b821cdeb45a04a2679c035a6ad69af392c06a63dd0b1c02bbee28eddc7e1b19e3ce555c0bd9e279fb97cfec3f16a90d67d069353111e3123a9"], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000484) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x2) 09:54:06 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000080)={0x80000000000000}) [ 1270.761923][ T1486] ion_ioctl: ioctl validate failed [ 1271.500416][ T1484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1271.605582][ T1484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 09:54:19 executing program 0: syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffffa600e931190000000000000680ffffff81000000e100e2ff87770072003007005500000000000000008000da55aa", 0x40, 0x1c0}]) 09:54:19 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:19 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x20) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB], 0x65) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000100)=@v1={0x1000000, [{0x2}]}, 0xc, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 09:54:19 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)='net_prio.ifpriomap\x00', 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0xfffe, 0x9, 0x5, 0x379e}, {0x8, 0x4, 0xd0, 0x7ff}, {0x6, 0x8, 0xe9, 0x9}, {0x7f, 0x8, 0x0, 0xfffff800}, {0x8, 0x80, 0xff, 0xe2}]}) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000240)={{r2}, 0x7, &(0x7f0000000180)=[0x68d, 0xdb2, 0x4, 0x200, 0x0, 0x6, 0x2], 0x100000001, 0x3, [0x9, 0x8, 0x10001, 0x80]}) exit_group(0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r0, 0xc, 0x0, 0x0, 0x0}, 0x20) 09:54:19 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0213"], 0x10}}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_GET_VERSION(r0, 0x400c55cb, &(0x7f0000000000)) 09:54:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$dupfd(r2, 0x0, r3) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1) write$tun(r0, &(0x7f0000000700)={@void, @val, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote, @local}, {{0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}}}}}, 0x62) [ 1282.854554][ T1548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1282.873336][ T1548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1282.972881][ T28] audit: type=1804 audit(1599472459.366:808): pid=1561 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1245/bus" dev="sda1" ino=15759 res=1 errno=0 09:54:19 executing program 4: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000140)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000540)='GPL\x00', 0x6, 0xfd, &(0x7f00000002c0)=""/253, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:54:19 executing program 2: r0 = socket(0x2, 0x3, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000001d80), 0x4) 09:54:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@union={0x0, 0x4, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}]}, @typedef, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0xa8}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 09:54:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ftruncate(r0, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x2a, 0x0, &(0x7f0000000280)) 09:54:20 executing program 4: setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x50, 0xffffffffffffffff, 0x8000000) setuid(0x0) ioprio_set$uid(0x0, 0x0, 0x4004) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd804, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, r1, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0018, 0x103}}], 0x1, 0x100, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x8001) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) dup(0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "074976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7673c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 1283.587936][ T1581] ptrace attach of "/root/syz-executor.4"[1580] was attempted by "/root/syz-executor.4"[1581] 09:54:20 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x8002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 09:54:20 executing program 1: pipe(&(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF2(r2, 0x402c542b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "50d9530dd56c6d861e99b6bf116ecdb2b88b99"}) 09:54:20 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:20 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@union]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 09:54:20 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) read$usbmon(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) sendfile(r1, r2, 0x0, 0xffffffff) creat(&(0x7f00000000c0)='./bus\x00', 0x6f) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000240)="d844b8f6e5c902acf4235f123afae0f09299269bc78cb446fe83b24b74f89e04f36f8de17632028d3e4f7711fe", 0x2d}], 0x1, 0x9, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x6}, {0x5, 0x8}]}, 0x14, 0x3) [ 1283.953453][ T1596] FAT-fs (loop5): bogus number of reserved sectors [ 1283.962825][ T1601] ptrace attach of "/root/syz-executor.2"[1600] was attempted by "/root/syz-executor.2"[1601] [ 1283.993556][ T1596] FAT-fs (loop5): Can't find a valid FAT filesystem 09:54:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r5, 0xb03, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) dup2(r6, r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, r3, 0xb03, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) [ 1284.050128][ T28] audit: type=1804 audit(1599472460.446:809): pid=1603 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1246/file1/bus" dev="sda1" ino=16361 res=1 errno=0 [ 1284.251997][ T28] audit: type=1804 audit(1599472460.646:810): pid=1611 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir433454752/syzkaller.5CNtB7/1338/file0/bus" dev="ramfs" ino=94108 res=1 errno=0 [ 1284.418696][ T28] audit: type=1804 audit(1599472460.806:811): pid=1615 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir433454752/syzkaller.5CNtB7/1338/file0/bus" dev="ramfs" ino=94108 res=1 errno=0 09:54:21 executing program 3: dup(0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r1 = memfd_create(&(0x7f00000002c0)='\xafs\xcb7\xf9\xae\x82\xe4\xc0\xa5veMin\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc4l\x94\xa1\xdb\x8d9\x87\xdf #W\x10\x17\xae\xa3iTY\xaf\x96\xee\xfb\x0ef\x00\xb6\xeeU\x95\x8d\xde\x9dS\xbb\x92\x1f\x1dS\xb5\xc2Z\xf6\v>t\xc9H1\x8f4\xefl\x10\x0e\x92\xad@m\xd3\x84\xd5\xe8Oo\xc7\x81X\x1f}\xc9h\xd4\xb1a\xef.bK\x0e\x9a\xfe\x99\t\xfa\xbd8\x06+\x02\xa1\xec09\xfb\x92Y\xad\xed\xf5\x88x\x95\xf3HU\x84r\xa7\x16\xbf\xe0\xb5\xdd+*\xcb$f]\xb3\xdc .\a\xad)\xf90\x1b\x1b9\xae\b\xa1 \xe7\xd8\x9exS\xe6\xbf\xe3P\xe5\x7f\xc1\x93\x8f\x04\x81q\t5[\xca\xfc\x94\x82\xde\x00\xc1:\xbd{98\x9e\xaa\xc3&\x8a\xbe\xf2r)\x01\x1a#bQY\xe1\xfb\x88V\xad\xca\xbeS\xcc\xaa\x01\x00\x00\x00\x00\x00\x00\x00.\n\xbb\xd33.=\xdd\xaa\xa8\xa0\fV\xb8\x15\xa68\x9e\x1f\xbdW\r\x1cV\x14\x12\xe0\x86mN.\xfe\x8e\xd4\xd3xM\xe1P\xceH:\xdc\x06\xfckg\x95\x9dO\v\xc7\a\x92\n$\x82\x00\x00\x00\x00\x14\x90\xc7\x14\xd9l\x02\xad\b\xb6\x030xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000003c0)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) unshare(0x20000400) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x20}, 0x11563, 0x2, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x101442, 0x0) write$P9_RWALK(r3, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4080, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x6, 0x1}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 09:54:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1404, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40007, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 09:54:21 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@random={'security.', 'workdir'}, &(0x7f0000000140)='upperdir', 0x8, 0x0) [ 1285.008161][ T28] audit: type=1804 audit(1599472461.406:812): pid=1614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir433454752/syzkaller.5CNtB7/1338/file0/file0/bus" dev="ramfs" ino=94119 res=1 errno=0 09:54:21 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0xffff0f00, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) [ 1285.106785][ T1633] FAT-fs (loop5): bogus number of reserved sectors 09:54:21 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x64) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 1285.167994][ T28] audit: type=1804 audit(1599472461.436:813): pid=1615 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir433454752/syzkaller.5CNtB7/1338/file0/file0/bus" dev="ramfs" ino=94119 res=1 errno=0 [ 1285.199889][ T1633] FAT-fs (loop5): Can't find a valid FAT filesystem 09:54:21 executing program 3: unshare(0x40600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) ioctl$TCSETSF(r1, 0x5412, 0x0) [ 1285.367626][ T28] audit: type=1800 audit(1599472461.526:814): pid=1636 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16334 res=0 errno=0 09:54:21 executing program 0: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x64) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000003e00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) [ 1285.510707][ T28] audit: type=1800 audit(1599472461.626:815): pid=1636 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16334 res=0 errno=0 09:54:22 executing program 2: pipe2(&(0x7f00000001c0), 0x86000) setresuid(0xee01, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000017001f7000ca98040000008004000000040010"], 0x18}}, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x80000, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32]) mkdir(&(0x7f0000000000)='./file0\x00', 0x86) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x100c10, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x9, 0x0, 0x2, 0x4}, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') sigaltstack(&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)='{', 0x1}], 0x1) close(r1) 09:54:22 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000002c0)=""/215, 0xd7) [ 1285.622055][ T28] audit: type=1804 audit(1599472461.666:816): pid=1640 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1247/file1/bus" dev="sda1" ino=16321 res=1 errno=0 09:54:22 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = open(&(0x7f0000002000)='./bus\x00', 0x103040, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40286608, &(0x7f0000000000)) tkill(r0, 0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 09:54:22 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:22 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') lseek(r0, 0x20, 0x0) [ 1286.040486][ T1673] ptrace attach of "/root/syz-executor.0"[1670] was attempted by "/root/syz-executor.0"[1673] [ 1286.261270][ T1677] FAT-fs (loop5): bogus number of reserved sectors [ 1286.301730][ T1677] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1286.393981][ T28] audit: type=1804 audit(1599472462.786:817): pid=1677 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1248/file1/bus" dev="sda1" ino=15760 res=1 errno=0 09:54:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4093, 0xffd}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffff, 0x0, "00000000000000ff0700"}) read(r1, &(0x7f00000000c0)=""/19, 0x3) 09:54:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a000000010003b0e2000"/20, @ANYRES32, @ANYBLOB="020000000000000080001200080001007674693674", @ANYBLOB], 0xa0}}, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 09:54:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000280)={@void, @void, @eth={@remote, @random="06845efb43d0", @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) unshare(0x20020400) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vlan1\x00', 0x800}) fsync(0xffffffffffffffff) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8400, 0x66) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x2c, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000340)="2819e6001aa9af74becb04cb875fd5937f7134ce21fdd2695d338059991ce07a6ae975a8684916788b2a6c1df051e86e80f61dda9fa8da51bce09f739f547526076b4dc1c35573cd1788c03837c8c14a30c2048838a326c7711a2214af662e3318b39d5a36", 0x10000}]) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x200, 0x0) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x9e3b, r4, &(0x7f00000002c0)="d4e0031b2701b04885c994892711aa913f3fbbc594af3e6c17cfe87eb9ebee01c025c39bc426fcd88a22459db61f7173ad01cb060df945da25c7f6ff45cc9282a906e1ef4ea104fac5fd7e7c60cd0e1f24fdce8d42c350a458df020c799e5c70dcc710fa7cea74fe94917c1cd014e172db5b4321ad3a7dfd00aa87aa4ccead65e69f6908bbdd6d78d3", 0x89, 0x24, 0x0, 0x2, r5}, &(0x7f0000000380)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000180)) 09:54:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 09:54:23 executing program 1: r0 = socket(0x10, 0x10000000000003, 0x0) write(r0, &(0x7f0000000040)="26000000130046f10701c1b00ed95d182800fe8f635778a20100008007000000090000000000", 0x26) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x384d, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x6, 0x4) recvmsg(r0, &(0x7f0000f95fd7)={0x0, 0x0, 0x0, 0x0, &(0x7f0000f91000), 0xffffffffffffff5d}, 0x0) 09:54:23 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x309000, 0x0) unshare(0x44000600) readv(r0, 0x0, 0x0) 09:54:23 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480), 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000280), 0x8) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @dev}, 0x1c, 0x0}, 0x0) [ 1286.900869][ T1728] IPVS: ftp: loaded support on port[0] = 21 09:54:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x15, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x108) 09:54:23 executing program 2: syz_usb_connect$hid(0x0, 0x36, 0xfffffffffffffffd, 0x0) unshare(0x44000400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = dup(r0) ioctl$FS_IOC_RESVSP(r1, 0x41015500, 0x0) 09:54:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x0, 0x0, 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1287.243792][ T1728] lo speed is unknown, defaulting to 1000 09:54:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f0000002b40)=[{{0x0, 0x40007, 0x0}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) utime(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x440d4) 09:54:23 executing program 3: r0 = socket(0x18, 0x0, 0x1) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) ftruncate(r1, 0x2008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x6, &(0x7f0000000000), 0x20a154cc) 09:54:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = socket(0x2, 0x3, 0xff) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x6042, 0x0) ftruncate(r2, 0x2008002) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x200fff) 09:54:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup2(r1, r0) bind$xdp(r2, 0x0, 0x0) 09:54:24 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') open(&(0x7f0000000040)='./bus/file0\x00', 0xf000, 0x0) [ 1287.663933][ T1729] IPVS: ftp: loaded support on port[0] = 21 09:54:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 09:54:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x80) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) [ 1288.194504][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1288.194519][ T28] audit: type=1804 audit(1599472464.586:823): pid=1774 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1071/bus" dev="sda1" ino=16381 res=1 errno=0 [ 1288.403103][ T28] audit: type=1804 audit(1599472464.656:824): pid=1774 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1071/bus" dev="sda1" ino=16381 res=1 errno=0 [ 1288.434824][ T1729] lo speed is unknown, defaulting to 1000 [ 1288.591504][ T28] audit: type=1804 audit(1599472464.686:825): pid=1774 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1071/bus" dev="sda1" ino=16381 res=1 errno=0 [ 1289.525809][ T186] tipc: TX() has been purged, node left! 09:54:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x0, 0x0, 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_names\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 09:54:26 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xa0000004}) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 09:54:26 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/', 0x309000, 0x0) unshare(0x44000600) readv(r0, 0x0, 0x0) [ 1290.224861][ T28] audit: type=1804 audit(1599472466.617:826): pid=1825 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1250/file1/bus" dev="sda1" ino=16372 res=1 errno=0 [ 1290.298114][ T1831] IPVS: ftp: loaded support on port[0] = 21 09:54:26 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet(r0, &(0x7f00000027c0)=[{{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x38, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x24, 0x1f, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x38}}], 0x1, 0x0) [ 1290.400404][ T1831] lo speed is unknown, defaulting to 1000 09:54:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='configfs\x00', 0x0, &(0x7f00000001c0)='nomand\x00') 09:54:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETS(r1, 0x5435, 0x0) 09:54:27 executing program 0: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:crash_device_t:s0\x00', 0x24, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) [ 1290.983659][ T28] audit: type=1400 audit(1599472467.377:827): avc: denied { relabelto } for pid=1853 comm="syz-executor.0" name="file1" dev="sda1" ino=16365 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crash_device_t:s0 tclass=dir permissive=1 09:54:27 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x0, 0x0, 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1291.131282][ T28] audit: type=1400 audit(1599472467.417:828): avc: denied { search } for pid=1853 comm="syz-executor.0" name="file1" dev="sda1" ino=16365 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crash_device_t:s0 tclass=dir permissive=1 [ 1291.186651][ T1860] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1291.223305][ T28] audit: type=1400 audit(1599472467.417:829): avc: denied { write } for pid=1853 comm="syz-executor.0" name="file1" dev="sda1" ino=16365 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crash_device_t:s0 tclass=dir permissive=1 [ 1291.354946][ T28] audit: type=1400 audit(1599472467.417:830): avc: denied { add_name } for pid=1853 comm="syz-executor.0" name="work" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crash_device_t:s0 tclass=dir permissive=1 [ 1291.453612][ T28] audit: type=1400 audit(1599472467.417:831): avc: denied { create } for pid=1853 comm="syz-executor.0" name="work" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crash_device_t:s0 tclass=dir permissive=1 [ 1291.550192][ T28] audit: type=1400 audit(1599472467.437:832): avc: denied { setattr } for pid=1853 comm="syz-executor.0" name="work" dev="sda1" ino=16360 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:crash_device_t:s0 tclass=dir permissive=1 [ 1292.883112][ T1868] IPVS: ftp: loaded support on port[0] = 21 [ 1292.980866][ T1868] lo speed is unknown, defaulting to 1000 [ 1293.495483][ T186] tipc: TX() has been purged, node left! [ 1293.511749][ T186] tipc: TX() has been purged, node left! [ 1293.537511][ T1868] chnl_net:caif_netlink_parms(): no params data found [ 1293.598902][ T1868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.606320][ T1868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.614072][ T1868] device bridge_slave_0 entered promiscuous mode [ 1293.624854][ T1868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.632952][ T1868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.642902][ T1868] device bridge_slave_1 entered promiscuous mode [ 1293.671981][ T1868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.689076][ T1868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.717187][ T1868] team0: Port device team_slave_0 added [ 1293.725246][ T1868] team0: Port device team_slave_1 added [ 1293.756095][ T1868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.763127][ T1868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.790427][ T1868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.803547][ T1868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.811341][ T1868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.838141][ T1868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.877376][ T1868] device hsr_slave_0 entered promiscuous mode [ 1293.884128][ T1868] device hsr_slave_1 entered promiscuous mode [ 1293.892091][ T1868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1293.900161][ T1868] Cannot create hsr debugfs directory [ 1294.019927][ T1868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.027140][ T1868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.034418][ T1868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.041550][ T1868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.103856][ T1868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.129678][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1294.140318][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.149193][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.157956][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1294.174914][ T1868] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.189967][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1294.199796][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.206947][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.226576][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1294.238845][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.245950][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.267264][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1294.288556][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1294.297833][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1294.308149][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1294.324793][ T1868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1294.357785][ T1868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1294.378789][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1294.427774][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1294.435297][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1294.463163][ T1868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.563499][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1294.574516][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1294.605154][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1294.614100][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1294.626563][ T1868] device veth0_vlan entered promiscuous mode [ 1294.637974][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1294.646543][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1294.659291][ T1868] device veth1_vlan entered promiscuous mode [ 1294.703111][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1294.722570][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1294.735426][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1294.753937][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1294.768041][ T1868] device veth0_macvtap entered promiscuous mode [ 1294.792178][ T1868] device veth1_macvtap entered promiscuous mode [ 1294.828119][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1294.838961][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.849851][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1294.860714][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.870921][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1294.881672][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.891783][ T2464] Bluetooth: hci2: command 0x0409 tx timeout [ 1294.898322][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1294.910288][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.920510][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1294.936684][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.955702][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1294.966905][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.979127][ T1868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.988995][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1294.998659][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1295.007973][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1295.018128][ T2464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1295.031319][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1295.044195][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.055499][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1295.069525][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.080205][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1295.091580][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.102300][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1295.113934][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.125974][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1295.137173][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.148853][ T1868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1295.160421][ T1868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.173003][ T1868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.182946][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1295.193737][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:54:31 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 09:54:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000140), 0xfdca) 09:54:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') prctl$PR_CAPBSET_DROP(0x18, 0xd) r0 = open(&(0x7f0000000200)='./file1\x00', 0x10397e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x48088}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='\xaa\xa7f\x98\xb4\xee\xb9!u\x7f]\x04\at\xaa\xbb\xe9\xde\xa3k\xf3\x10Hq1\xcf\x8f\xd3&\xe7\xb4s \xde\xa6\xc2\xbel4\xdc\x93\xce`dd\x8d\xaaQA\x01$\xcbF\xea\x98?:\xcf}ULn\xdc\xce\xbaD\x17\xfd0R\xbc\xfb\xec\x16\xbe\xca\xe5\x8e\xfb\x85\xcbg\xf5\x00\xbb\xce\x17~\xed1\xebi\xc2\x04\xbcc\x95\xf7$%\xc4HZ\xfc\x970\xf5l\"\x92\x82\xd2\xb9\xaa\xd5\xea\x9c\f\x9bZ\xb4\x04G\x97\x99\xb9\xe8\xcd\xfb\xbfw\xc3^\xb1\xeec\t\xf6\x1cH\xbc,\x84O\xc8\xd6\xa2.\xf49q\xe3', 0x0) statx(0xffffffffffffffff, &(0x7f0000000300)='./bus/../file0\x00', 0x400, 0x2, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@deltclass={0x78, 0x29, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x2}, {0xd, 0xffff}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x0, 0x81}}, @tclass_kind_options=@c_ingress={0xc, 0x1, 'ingress\x00'}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0xcb}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2329}]}}, @tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4804}, 0x80) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @remote}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x14011) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0xe5d7280f34b7dff6, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'ovf\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4094) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x4000880) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @empty}, 0xc) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 09:54:31 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x7) r1 = dup(r0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xa23, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:54:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 09:54:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x0, &(0x7f0000000300), 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1295.409940][ T2105] overlayfs: './file0' not a directory [ 1295.531551][ T2119] FAT-fs (loop5): bogus number of reserved sectors 09:54:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x6800}}, 0x1c) 09:54:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x17, 0x209, 0x0, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@rand_addr=0xaac0f00}]}, 0x1c}}, 0x0) [ 1295.595920][ T2119] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1295.618729][ T28] kauditd_printk_skb: 10 callbacks suppressed 09:54:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b55000)={0x2, 0x2, @multicast2}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000002c0)=0xffffffffffffffff) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xa10ce6f) sendto$inet(r0, 0x0, 0x0, 0x900000020048011, &(0x7f0000000000)={0x2, 0x2, @empty}, 0x10) r1 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1, 0xd}, &(0x7f0000000200)='R\tr0s\xac\x84cusgrVex:DeXy\x13\x12 =\xe0A(\xc8\x17~\xee\x87\xd4\xd7i\x0fH\x10\xe5\x14U\xf1E\x7f\xea:X\xaf\xe1\x11\xcb\ftuo\xba\x1f\xd8xx\xf7\xca\x04\x1a\xd3\x84%4?R\xcc\'lr\x9d\x05R\x0e', r1) keyctl$clear(0x7, r1) [ 1295.618741][ T28] audit: type=1804 audit(1599472472.017:843): pid=2117 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1074/file1/bus" dev="loop3" ino=53 res=1 errno=0 [ 1295.803760][ T28] audit: type=1804 audit(1599472472.057:844): pid=2126 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1252/file1/bus" dev="sda1" ino=15758 res=1 errno=0 09:54:32 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000300)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000100)={[{@fat=@time_offset={'time_offset'}}]}) 09:54:32 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x5, 0xcf, 0x8, 0x81, 0x1, 0x0, [0xda, 0x5f, 0x34, 0x5f, 0x30, 0x34, 0x32, 0x42, 0x34, 0x34, 0x34, 0xc0, 0x5f], 0x0, 0xffffffffffffffff, 0x8}, 0x40) 09:54:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x1, 0x20, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x3, 0x0, 0x68f58, 0x1000, 0x7, 0x4, 0xff, 0xb85, 0x2}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2e5b, 0xe7}, 0x110, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r4 = creat(&(0x7f0000000180)='./bus\x00', 0xc2) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000680)='./bus\x00', 0x1c7) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) [ 1296.070434][ T2144] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1296.252906][ T28] audit: type=1800 audit(1599472472.647:845): pid=2152 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15906 res=0 errno=0 [ 1296.338305][ T28] audit: type=1804 audit(1599472472.717:846): pid=2154 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1074/file1/bus" dev="loop3" ino=53 res=1 errno=0 09:54:32 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000900)=""/82, 0x52}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/203, 0xcb}, {&(0x7f0000000a80)=""/37, 0x25}, {&(0x7f0000000ac0)=""/245, 0xf5}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) 09:54:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x20000000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x1020081, 0x4) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c542) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x1e4, 0x13, 0x420, 0x70bd2c, 0x25dfdbfb, {0x0, 0x5b, 0x0, 0x0, {0x4e23, 0x4e23, [0x3, 0x2, 0x96, 0x3f], [0x8000000, 0xa69, 0x6, 0x2], 0x0, [0x0, 0x7fffffff]}, 0x8, 0x5d5}, [@INET_DIAG_REQ_BYTECODE={0x60, 0x1, "dbef18be5e6fc33e52bd16e10eb59f73ffb1fb90951bc66c1c689ad0505ee819b32923fb52d7bf616fe1431da2c4c6d429ee2d142dac8a944853e0e77dd1a1c02c9f88bcf7d1af254b9b93acb52c4c36eccd35a895f204c611c941e0"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "327987ab65694cf2e80582e624cb1f02e7a81b7bf29498502fb09a00e742bff94ff05d3f5b42"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "904ca48fa03c303cb7e90668b3dbc6520f000e1fa06c1f44c637eb9120123024a28279e63fe8db0bf9c773e334fd76699c80efa779e49fbc641519f62f893bfcc506"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "80173ae7ea16b46e7cd118a2bb63c4dd1c9974e15e33492e4696dfbe690f71e06dcb3b8cc5"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "dd9febea45aa664077c5c2ddcb4f33ad185a08723987364fce2c2fad56696c75b7e1f1dc28ec1d6bbd0130cd15f051e7f79c8dae2325e4e323d1b1b2b043e3b33cc246c6d60336d4f6090aded7454bf30e3ea4546f995d3d3ecb0203995ac2903a55f6811a638a8e69222b5444d5629b7e28ab62ab44d4a43aad2eb7861c1b2ced242e6cf61cb76881130f57380911"}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000040}, 0x20004000) dup2(0xffffffffffffffff, 0xffffffffffffffff) 09:54:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') prctl$PR_CAPBSET_DROP(0x18, 0xd) r0 = open(&(0x7f0000000200)='./file1\x00', 0x10397e, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x48088}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='\xaa\xa7f\x98\xb4\xee\xb9!u\x7f]\x04\at\xaa\xbb\xe9\xde\xa3k\xf3\x10Hq1\xcf\x8f\xd3&\xe7\xb4s \xde\xa6\xc2\xbel4\xdc\x93\xce`dd\x8d\xaaQA\x01$\xcbF\xea\x98?:\xcf}ULn\xdc\xce\xbaD\x17\xfd0R\xbc\xfb\xec\x16\xbe\xca\xe5\x8e\xfb\x85\xcbg\xf5\x00\xbb\xce\x17~\xed1\xebi\xc2\x04\xbcc\x95\xf7$%\xc4HZ\xfc\x970\xf5l\"\x92\x82\xd2\xb9\xaa\xd5\xea\x9c\f\x9bZ\xb4\x04G\x97\x99\xb9\xe8\xcd\xfb\xbfw\xc3^\xb1\xeec\t\xf6\x1cH\xbc,\x84O\xc8\xd6\xa2.\xf49q\xe3', 0x0) statx(0xffffffffffffffff, &(0x7f0000000300)='./bus/../file0\x00', 0x400, 0x2, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x1000) lseek(r1, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@deltclass={0x78, 0x29, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x2}, {0xd, 0xffff}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x0, 0x81}}, @tclass_kind_options=@c_ingress={0xc, 0x1, 'ingress\x00'}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x1}, @TCA_QFQ_LMAX={0x8, 0x2, 0xcb}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2329}]}}, @tclass_kind_options=@c_skbprio={0xc, 0x1, 'skbprio\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4804}, 0x80) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @remote}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x14011) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0xe5d7280f34b7dff6, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'ovf\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4094) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x4000880) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @empty}, 0xc) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 09:54:33 executing program 1: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @loopback}, @mcast2={0xff, 0x5}}}) clone(0x40000080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:54:33 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x0, &(0x7f0000000300), 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1296.624802][ T28] audit: type=1804 audit(1599472472.917:847): pid=2153 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1074/file1/bus" dev="loop3" ino=53 res=1 errno=0 09:54:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000040)={0xfffffffffffffdef, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000000c0)) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000400)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) ftruncate(0xffffffffffffffff, 0x2008002) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000000)) [ 1296.829884][ T28] audit: type=1804 audit(1599472473.087:848): pid=2164 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1263/file0" dev="sda1" ino=16129 res=1 errno=0 09:54:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) listen(r1, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x0) [ 1296.911834][ T2171] FAT-fs (loop5): bogus number of reserved sectors [ 1296.966991][ T2464] Bluetooth: hci2: command 0x041b tx timeout [ 1296.980534][ T28] audit: type=1804 audit(1599472473.157:849): pid=2161 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1263/file0" dev="sda1" ino=16129 res=1 errno=0 [ 1297.004592][ T2170] IPVS: ftp: loaded support on port[0] = 21 [ 1297.009410][ T28] audit: type=1804 audit(1599472473.357:850): pid=2181 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1253/file1/bus" dev="sda1" ino=16129 res=1 errno=0 [ 1297.036815][ T2171] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1297.053772][ T2170] lo speed is unknown, defaulting to 1000 09:54:33 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)="660af8c5f5b4f35a8d0afc53070000caebcabc97d1dd1d02ae98b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022a19b000f338884fbbb07cfb0169d210fe0b9c4e341fd03d27c12680affc7cca744c7975f94594e3cf774196781960fb71d9dea824024ce7991548d80ca9efb63cdbec5a31c9a8bf27af1a9cdc170498650419194b93b", 0x9b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x37) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 1297.319923][ T28] audit: type=1804 audit(1599472473.717:851): pid=2182 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1075/file1/bus" dev="loop3" ino=55 res=1 errno=0 09:54:33 executing program 2: unshare(0x40600) r0 = open(&(0x7f0000000140)='./bus\x00', 0x1c3241, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) [ 1297.414884][ T2195] ptrace attach of "/root/syz-executor.2"[2194] was attempted by "/root/syz-executor.2"[2195] 09:54:34 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x0, &(0x7f0000000300), 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:34 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 09:54:34 executing program 2: syz_open_procfs(0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = epoll_create(0x7) r1 = dup2(r0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) epoll_create(0x7) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in=@rand_addr=0x64010100, 0x4e21, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0xb0, 0x3b}, {0xdcfd, 0x7ff, 0xe77, 0x0, 0xfffffffffffff06d, 0x2, 0x264}, {0x8000, 0x0, 0xfffffffffffffffa, 0x800000000000000}, 0xc00, 0x6e6bbe, 0x2, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d5}, 0x0, @in=@broadcast, 0x3501, 0x2, 0x1, 0xfb, 0x2, 0x4, 0x40}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x0, 0x100, 0x9, 0x7}, 'syz1\x00', 0x27}) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x8f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100, 0x0, 0x0, 0xe], 0x0, 0xffffffffffffffff, 0x0, 0x49000000}, 0x40) 09:54:34 executing program 3: syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="020181ffffff0a000000ff45ac00000000004200e931190000000000000680ffffffbf000000e100e2ff87770072003007000500000000000000008000da55aa", 0x40, 0x1c0}]) [ 1297.909684][ T2209] FAT-fs (loop5): bogus number of reserved sectors [ 1297.916632][ T2209] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1297.982407][ T28] audit: type=1804 audit(1599472474.377:852): pid=2209 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1254/file1/bus" dev="sda1" ino=16163 res=1 errno=0 [ 1298.295501][ T17] usb 5-1: new high-speed USB device number 7 using dummy_hcd 09:54:34 executing program 2: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x36, &(0x7f0000000100)=0xbaa) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x800, 0x0) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50}, 0x50) close(r1) [ 1298.535406][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 1298.656323][ T17] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1298.698007][ T17] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 09:54:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{0x0}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1298.762451][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.842150][ T17] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1299.021386][ T2251] FAT-fs (loop5): bogus number of reserved sectors [ 1299.046735][ T17] Bluetooth: hci2: command 0x040f tx timeout [ 1299.069582][ T2251] FAT-fs (loop5): Can't find a valid FAT filesystem 09:54:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x4000000a}]}]}}, 0x0, 0x32}, 0x20) 09:54:35 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000001400)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:54:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@alg, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/68, 0x44}, 0x101}, {{&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000380)}], 0x2, &(0x7f0000001480)=""/244, 0xf4}, 0x8000}, {{0x0, 0x0, 0x0}, 0x100}, {{&(0x7f0000002980)=@tipc, 0x80, &(0x7f0000004ec0)=[{0x0}, {0x0}, {&(0x7f0000004a80)=""/207, 0xcf}, {0x0}, {&(0x7f0000004d00)=""/245, 0xf5}, {&(0x7f0000004e00)=""/161, 0xa1}], 0x6}, 0x5}], 0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r5 = socket(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001800)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x40010) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0\x00') sendmmsg(r5, &(0x7f0000007900), 0x4000099, 0x101d0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 1300.515612][ T186] tipc: TX() has been purged, node left! [ 1300.922052][T10413] usb 5-1: USB disconnect, device number 7 [ 1301.125809][ T2464] Bluetooth: hci2: command 0x0419 tx timeout 09:54:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x7ff, 0xc5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@l2, 0x80, 0x0, 0x0, &(0x7f0000000580)=""/246, 0xf6}, 0x10000}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) syz_open_procfs(0x0, 0x0) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x100000001) 09:54:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0) 09:54:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000017000100ed000500ffff000004"], 0x14}}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 09:54:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{0x0}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:40 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) mlock(&(0x7f000085a000/0x3000)=nil, 0x3000) mlock(&(0x7f00005bd000/0x4000)=nil, 0x4000) mremap(&(0x7f000058c000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000952000/0x2000)=nil) mlock(&(0x7f00007fc000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlockall(0x1) 09:54:40 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/93, 0x2000009d}], 0x1, 0x700, 0x0) 09:54:40 executing program 4: unshare(0x2000400) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) [ 1304.144380][ T2293] FAT-fs (loop5): bogus number of reserved sectors 09:54:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000100), &(0x7f0000000200)=0x4) [ 1304.213747][ T2293] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1304.267862][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1304.267876][ T28] audit: type=1804 audit(1599472480.668:854): pid=2298 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1256/file1/bus" dev="sda1" ino=16361 res=1 errno=0 [ 1304.572034][ T28] audit: type=1804 audit(1599472480.718:855): pid=2302 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1077/bus" dev="sda1" ino=16375 res=1 errno=0 09:54:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000bc0)=""/98, 0x62}, 0x405}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x18}, 0x10) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000680)={'L-', 0x800}, 0x16, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000c82000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000760000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000f17000/0x3000)=nil, &(0x7f000098b000/0x2000)=nil, &(0x7f0000000440)="86acd92899a4fe559a36d7e80aaa001a667250c7503d38f64d1edb5d8640725957da99139a88fe8aa3e9d9eea1bb03314997d02aaeabdfcda08329d227753651740fee0c28291842e97dae849ebaf477baf349030e04ac07d0696f122f1830c5b9dd94945c8e42ce64268602e7b579bfe68df50b8484e28dac0cb8737b10731a6c38a73e871c8a9e7ddbd8295d01cc42cccbdad4c6a0b08e99106e5de2285d7ad81a58df881612b446c1027b154c6ee31f215ffe", 0xb4, r4}, 0x68) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000580)=""/198) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={&(0x7f0000000380)}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r6, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x2) [ 1304.741779][ T28] audit: type=1804 audit(1599472480.718:856): pid=2302 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1077/bus" dev="sda1" ino=16375 res=1 errno=0 09:54:41 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000001200)=ANY=[@ANYBLOB="1201000037061008af0705000001010203010902120001000000000904"], 0x0) 09:54:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{0x0}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) io_submit(0x0, 0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x0) 09:54:41 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) pipe2(0x0, 0x84000) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x40002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0x4008550d, &(0x7f0000000000)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) 09:54:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000bc0)=""/98, 0x62}, 0x405}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x18}, 0x10) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000680)={'L-', 0x800}, 0x16, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000500)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000c82000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000760000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000f17000/0x3000)=nil, &(0x7f000098b000/0x2000)=nil, &(0x7f0000000440)="86acd92899a4fe559a36d7e80aaa001a667250c7503d38f64d1edb5d8640725957da99139a88fe8aa3e9d9eea1bb03314997d02aaeabdfcda08329d227753651740fee0c28291842e97dae849ebaf477baf349030e04ac07d0696f122f1830c5b9dd94945c8e42ce64268602e7b579bfe68df50b8484e28dac0cb8737b10731a6c38a73e871c8a9e7ddbd8295d01cc42cccbdad4c6a0b08e99106e5de2285d7ad81a58df881612b446c1027b154c6ee31f215ffe", 0xb4, r4}, 0x68) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000580)=""/198) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffd, 0x0, @perf_bp={&(0x7f0000000380)}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r6, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x2) [ 1305.200259][ T2334] FAT-fs (loop5): bogus number of reserved sectors [ 1305.213442][ T2334] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1305.236143][T16343] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1305.266183][ T28] audit: type=1804 audit(1599472481.668:857): pid=2334 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1257/file1/bus" dev="sda1" ino=16348 res=1 errno=0 09:54:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/4095, 0xfff}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) fcntl$setpipe(r3, 0x407, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000017c0)=ANY=[@ANYRESHEX=r3, @ANYRES16, @ANYBLOB="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"/286], 0x124}, 0x1, 0x0, 0x0, 0x4000850}, 0x800c0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd4, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$inet6(0xa, 0x2, 0x1) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, 0x0, 0x4000810) r4 = add_key$keyring(&(0x7f0000000540)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, 0x0, &(0x7f0000000300)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0xfffffffffffffffc) request_key(0x0, 0x0, &(0x7f0000000200)='R\tr0s\xac\x84cusgrVex:DeXy\x13\x12 =\xe0A(\xc8\x17~\xee\x87\xd4\xd7i\x0fH\x10\xe5\x14U\xf1E\x7f\xea:X\xaf\xe1\x11\xcb\ftuo\xba\x1f\xd8xx\xf7\xca\x04\x1a\xd3\x84%4?R\xcc\'lr\x9d\x05R\x0e', r4) [ 1305.535086][T16343] usb 2-1: Using ep0 maxpacket: 8 09:54:42 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = getpid() pidfd_open(r2, 0x0) r3 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x2) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fsync(r3) pidfd_send_signal(0xffffffffffffffff, 0x16, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000100)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x410000, 0x0) [ 1305.678170][ T2359] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/6' not defined. [ 1305.855446][T16343] usb 2-1: New USB device found, idVendor=07af, idProduct=0005, bcdDevice= 1.00 [ 1305.871509][T16343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.892804][T16343] usb 2-1: Product: syz [ 1305.904067][T16343] usb 2-1: Manufacturer: syz [ 1305.915878][T16343] usb 2-1: SerialNumber: syz [ 1305.931607][T16343] usbip-host 2-1: 2-1 is not in match_busid table... skip! 09:54:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043556e0040000000000109022400010000000009040000010301000009210000000122050009058103"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000c40)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="05006c"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) 09:54:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bbc0)={0x8, [], 0xbe, "cbab7ffcace4a6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049400)={0x0, [], 0x8, "3217abc1e70ada"}) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000006bbc0)={0x8, [], 0xbe, "cbab7ffcace4a6"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004a400)={0x8, [], 0x6, "6a649565cf74a3"}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5a000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000006bbc0)={0x8, [], 0xbe, "cbab7ffcace4a6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b400)={0x5, [], 0x11, "32c5e0e3e770f6"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006b9c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000006bbc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0xbe, "cbab7ffcace4a6"}) sync() 09:54:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x8000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022000000000000001000000002001300f3ffffff25bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) 09:54:43 executing program 2: mlockall(0x1) open(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0xca200) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, 0x0, 0x0, 0x4) open(0x0, 0x0, 0x0) [ 1306.710767][ T2378] FAT-fs (loop5): bogus number of reserved sectors [ 1306.746911][ T2378] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1306.806580][ T28] audit: type=1804 audit(1599472483.198:858): pid=2386 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1258/file1/bus" dev="sda1" ino=15771 res=1 errno=0 [ 1306.994900][T28177] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1307.405498][T28177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.422569][T28177] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.447274][T28177] usb 4-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.40 [ 1307.493044][T28177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.525053][T28177] usbip-host 4-1: 4-1 is not in match_busid table... skip! 09:54:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000015c0)='.\x00', 0x1) getdents(r2, 0x0, 0x0) 09:54:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 09:54:44 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 09:54:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1307.976032][T16349] usb 2-1: USB disconnect, device number 3 09:54:44 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) wait4(r1, &(0x7f0000000080), 0x0, &(0x7f0000000140)) [ 1308.040346][ T2422] FAT-fs (loop5): bogus number of reserved sectors [ 1308.054188][ T2422] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1308.091147][ T2425] binder: 2418:2425 ioctl c018620c 200000c0 returned -22 09:54:44 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32, @ANYBLOB="0100f0150100c1001800120008000100736974000c00020008000300", @ANYRESDEC], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2}, [@IFA_CACHEINFO={0x14, 0x4}, @IFA_LOCAL={0x14, 0x2, @remote}]}, 0x9e}}, 0x0) 09:54:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getxattr(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="230228efb4a24fe84689000080cb000000005d6fe0eb92552fba4784466ebedbcc3e06000000000000006c0e09d1ede6c1f37b9c352ef85a00004380a8cf359a30a74dc68c37cfbe8808000000000000997208002a74e3e6236e1882c601f2b49e32098f6919c7234cebfe065d74f205005de2be4e7b3881c92986a5aba82763b2d64194569196560b10d425ddd904000000000000004b03ba4b656f9029509bed808f4aa86c8dc50de43149543b9124af5e9ccd3c36c416e6ba34d30721fec6933bef175b6dcfcb5c2c428f750e12bf08cf6a46df9b9e5b00c8de1d6687f10b410b852cc7c6dba25ce854d650dc3a13984b627b85d0809e6a420000a9027b413acacb65253484b86864a9a334b01bee1f2d34137b74920371226fd9e796f5586d354ba2edab762282359053a77689cb44982409000000f10fba67eb000dbbd15658dca7369052f97b8caebd4786bce825d47510a349a27b00000000000000000000000000003ae9aaacb2c6eb2ecd04979b7869f8a7cdf5f079861a964036381305ff8a9f4e7e645ac443ce61c54b95fd12d059fa37e1c4770b39ac61c3ea62c09838969753e7e15fcc1d6c1a40781864d1d90000000000c15aea9f836279c9c14009168d44292afe9e17259488c3da689c013a00a59990354ff96b99814834ed6ec4bdd0b0d7a88240841505ec2788805d0cf5aa421e23ff0579d1d25fa785cd120bc07457455a0a996cbed1d1c5bc13d3fe9824f7fc7d825b9b0b3c45d4d6217371753284a22c97e27a85956153cde4bddece070a49e8802d26fe68417bfb198507103762aa640317c9ddcd51158152010ac6c05fa138f5c30edae7fb23c3760e2b637b6fdb32c2ee5aac3ff445143b1bff2c7627e6231ec99fe89e1c36e001e2f4947390173cd63e1206ff18b12d7d7422a13c0e23fa70811cf246b231fd02"], 0x187) dup(0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000484) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 1308.117381][ T28] audit: type=1804 audit(1599472484.518:859): pid=2422 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1259/file1/bus" dev="sda1" ino=15987 res=1 errno=0 [ 1308.204063][ T2438] ptrace attach of "/root/syz-executor.2"[1868] was attempted by "/root/syz-executor.2"[2438] [ 1308.240179][ T2438] ptrace attach of "/root/syz-executor.2"[1868] was attempted by "/root/syz-executor.2"[2438] [ 1308.263578][ T2442] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1308.285015][ T2442] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 1308.350133][ T2449] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1308.386081][ T2449] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 09:54:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = fsmount(r1, 0x1, 0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x8b, 0x3, 0x1d, 0xc, "e1e7c353de49dcc951001abdbd78ae02f2023329efa081c5fe2f7c9311699aef52ff1d916ebdb56676f474d60e4cf8e3e887d119511a07ee70d2ae7884f8589e", "d8103370a8b78a30b6765aedca7641eaeb4db8d7acf1f084630c414dae2580d1", [0x7]}) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f0000007900), 0x4000099, 0x0) 09:54:46 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) 09:54:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 09:54:46 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f0000000100)='./file0/file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1}, 0x50) utimes(&(0x7f0000000480)='./file0/file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 09:54:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000080)="a1eeb94bf1f8bb8c0783f0075a0f97a29ac662545102afb4424d4cd0db737c9686e068bd39aa82bd7b79f80eddb1897487a8440179727147ed1939cb297d35110e5049f2617da64af5d12c47042b3b6c2509f6489c7a05f72f9e8d7d2aa96eb31912d7", 0x63, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0xa00000000000000, 0x0) [ 1309.643866][ T2464] usb 4-1: USB disconnect, device number 5 [ 1309.746674][ T2471] ptrace attach of "/root/syz-executor.0"[2468] was attempted by "/root/syz-executor.0"[2471] [ 1309.774226][ T2474] FAT-fs (loop5): bogus number of reserved sectors [ 1309.812787][ T2474] FAT-fs (loop5): Can't find a valid FAT filesystem 09:54:46 executing program 2: syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x74, 0x41) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000002c0)={{}, "e4a5ec07fbd6d51cb5af643db7280e388edc891167a389778809038cef70b563d6a2cd5ea78039e9c7521e9137e5a2d7c2c111d72361f97d23e3db9a0e2f4990fde1a697a2b45fd352ee4cfd445c0bbd7a3b933b01bff3dfac8576831674223148dda5090fd9202523ce19865a01ebf933db5f08cd9899ecfa300c71b7753195570bdc2e98fa862f7a3ad54a4339cfcd75423a8f92ca8282cb70a592c9dfc07d73cbe886a11d0e7228afb60a030335a13a20c062e84a4991691a2cec8bf6aa020db5d2b64f12c67852a033520075541948d9ad979af666fe915c6aceef75ec81eaf9c5c714f26683ee79e2bef86d8cad9819533dc85477875cf18ab4e392a07577099a68ffb1c23c061b30cb2e110fde032dba49d788dd5c92206b253c1ba5aecd49b10455532d64efce5c1c817fa2c1807327976892704d93ebb8f8f3103411e94e987471f98c92bcf4cc73dcb4413a9016a819ab9668cc4df2e9c4c853a2da171d86e87214f98f37d9317e28afc4bced661be28d645be5c352f04a457cc0dc6383315c234f426fd3e3e6a32ee8f5045f8547e66831d02c3634697fd6996ab577708812fd14c77a699a4c4b6b5a21a5d7af0bf7c99cb5f917aab77404667e8a5388a75f098b671d60c33f5f35343e7c706f2b03c4154e3f1cfd37c78f4e70cbc21a5274012986a2ade862d2196bf96e809fc2e6f00a96db245872762c3cd1d121f1c5b6a90bd4ae662b33c36f9e1b550ac0f4db976af237915d038f532fc74749f630ddc41477e08efea6e8130beab1a6c5f75d7eb6308f5ee3857e6fa8d79e32b83304b20f4241914b355ace60e47561120d0965670fedf380d78956bbd026e07c1da4ef81b21d7bb230a1ecd68c31b7a12eee8bfc8c81983a6521eedd139a5ebbc4c262c64d2237e2e4272fe754839e755b54bd1ccc6553ae7df4d27779f3e6061dea9bc704231a8232aedbe157e5f10bac89d1f0f374ffdf1d63bf8e8c6a837cb91bd1e9c2d9c831301176f05fb165b29174f8a277624d6d34f7d566c996874d9ec4fe4b45c97af2477b005f1be50efcaae53e84ac5113537b2bb2dae96d3968256304fe7cbf8ada62757a61dd0cf1e153ae00f39c3dc89318bfb91aa0290bdc7643ee5de344d7c5af0305a7490f20f78dcad42a13083df9cd955dff8cd4aa6c8c0b4fe5391f0840a17eecfb5670b885f6fb592a969f321bff18ec6ed55c7ffc7b0cbb28a41509234c059a669ad3539ac5f42dcdde453ee6d76dbc91845a7a69a58442b8607c50f457e6a0919f940e85532d54d313e10ef0dad83863f93dd137e9cd4e49af885a1f2259a914b1090a8f1fc880039352160447fa027ebc6f0278f31e9ecb7f2a4d315e4612834a7ad09e5f467f2ccf852cb87b768d36ccc335970fb4c43a124a45341062dfcb6b291bcf3406f5cf777bfde3721d156b159355960ea7f905fe15ec5f9ee686d380c01c4560ee00b9f8936a414e67dcf8ec319498415c396810fd0107f34df4f896119837e03b583c9d00420f8c3f5175730c2a736b8ff45accc1f19fcbe700576d0c746c537c15e6c05d777bb7cebabecd77617d3ca0072ed8fccb66df6fb608c4df1c73d71277ad5f36730cb29f3561ade4c983788909a4ae6d43e4ceea78a6432b1f71c6243a7247be5fd573c78f7830d14c418a053c9714a52c434aa8391dd95a50df404f355d37a20931a978157a3a928528340f4a33210f0446a533d08fb0731031667e1b2b4c1865b2524d24251ea8359560c20ccc4f076811e0aa5ee2b96b3891ebcdd190a065f9c229e2d959be512f38bacfcdfaf292fe2f924eff6d50069f0120e098ec7afef40ac25e74123e033dd56031d8c293c0c49b52c5573baa51e4260d39ffb0ca5d6a35ffc8b3bd8e1e5f36fbde879d0517f2898b8d9e6d5a8108d458aa14a0ace0146ccb7ec1e9c4a77599cf577b92a54b37daf1323098cbbf59b52c3d93a36ca08fe32599895731cfbc93b6c5705af237fb2210b7477f71cedb574e4cb41dadeb6610792cea047bed97ab7d1509739250ff01535fc3e5e8e856433de42fd23646c12b5c37170e795856cbecfb77da7340c5553643deb04e8e2d4b1d61dd29785ff5dbb362c555e92adcb6b5a8377ca79d0cbd98f2dec3b92c2e88c2b59620ae5ef742e9180e57208ba2215e39178118fa841b1cd2f68b62c9e14f013bd3614c0997452994cdbbdc527f9220bfab1717c72f5250d5e1bf8c0fa19c1bdf5ea748bf794011e0fb24ffdfe8f3dad27311fb0f927b98df931ee6aaee933df1adff1903fb65a7a1f8b301b018177c51b013b59840b353515142aae1ecd588d01173250f8c8641cd2a1cc960589a1265a5a3a16da8823119912069c9069dce0f020d5a34478861622dba8b9c4247e743a781de9e8a32f87a845711ef5aea2893fccad109cbb7cf0d1d905c4a6693e4441207cf02aca09a133fdbee95cb2dde63a8d711e64d78f56ca58c941712a5d526068b96bb43c4c52c090880099ca2daef1b7f3b06728084276a0f94066db98eff4caac5daa242eb2235e7b1706ae27094974e23222b2d94314d301de8f1155e4c6ef470504f3d78fa237d2eec84e6113ceaf8307c7a81a074fb0067c2a4025f28acaeafb1d059eb6fc3b48f3770d4c1ac621376f5d2bb5d7138527016e3a8630aeba09217338db4a60e48baa0b238f8143e2a11aaa30211c8639045e7b74c076093a434eaaadf4b9909d56dad8665d4111670010ca2a74be4d7203fc800027b55ad08254dbed21600cf883b94719af1fbe35461f20b56b0b96449ff86882a41a325a21508e4bde9ffa5e94fb60092d077e87fa85fe6d239246a70abab2882f34ebd9b0f0c095d303ceb175b6f6f60f28943b376fdccbdf1b03184f618b41ab8e463adcf3a07c5df470c53f7eb4aab9dbdd283f18605fe790331ae40073c56dde86e0a8fe977627173e19bbf4a330e763b75e654662b039f3d4f0ca80ba3398f49b891953d3a12747e38b52c964b67b7f5485a0ca6f4ba71fac6e3403259cf0ed82d7b0dfb11ee8e54fd9b1b5165e5e3366c37a9295c5d228262ea9b3933d3f8a42c55f141fdf3d8f387f09fe784d32c6608db63ad2bbcc047bd08b456a160374723128094873a86de03becb2d5b3df32955c60c20b365740eb3d13853acedeca10e99eca1a65ea702fc0e2aeb5c11fa53174bb2a28f258b141b6e49a75112f8761b89ec50e217eccb44d33ab148f791f65c18cf56956abf5df677b49db756a49a0a2252012fc438750842745002ddaeb4ae34b79bf2d7d2fdd8699e5e7e2eefb0c4a1859e27a012b8de1f440b351ab986c07ff0dd626ccf170075b2d1f008357cc60ca1972bf130a846d01545ad7d29aac9f49807bdbe3adf8eccbb9a4fd96603a00e34afe8dfdda6e17854aa14ca63a527519d3928a620db851a830c66c331512bdd88f967d457450091d71f20450fe39c5cd26bc39d68d3f3eeb244e9e3fbd914b78d3407162b83fb4d3f252b620d9a5b9a075250e4acbf3073d4afd6bf48decae7dd3fae670c82576e71eb8ca4012acc20438fa4b8260b9241f5e13864718df74c365c82dbbe94e9891ccf0d25240ee71d958ff82dfcc3ec839c3ab4c34d3ffe81668e29ab6b8fe6320b2538a85287ee6b155d57df7e9cbe07c9fd7a4480d456c33d9b59dbd678e628209ef04fa6d72f6d016c7161c47d2989ca6d8e29687722cf8cf93b92a8ba2e5be52232e29179303d096e551ca1612d3ce8ca6065618c58992fa0cd9c06473285b70646ec96388692953aad62e30e5521809001f2b2d1afb63a159c9a1901764465b71bddffa7387f43b3fd0712a752a89c7a59af8fc87532990c7e371ca0882084feaba0d94434215d81ee7810f2673b7f99f43a3a3a1569951940de39a95a4cc53994b9f5b4167311399cd0e96f6df2a7a5be85482e80bd6140837cabadfb32297ab565cb79695bfa621942227c9c9de0bd30456d472067b11dca7e0bff81b7b0f778a7eda2050aa219f39dba1e601e85b712244a6020da0dbbbbfee17aabe9f2250e749798200865ccc1e4eff1e62fcf71b0e8c6c1611cbde3835d2d0851633b13641f1fc590f2262264fbf09f31e2f99c79d67c9c9b823e39328d91a9a3a18ceba70e1a0fc0103421779f9adeb1d0e43634359d5bda0c30bcdbc01ac12e9a2db5aaba797351a0949c816bb11977291555bf515ac5b4da176ea52db0587768ee49f8825a58bc0d3957cbb917aa6d44bbd4d712a47a5269d04661cb1ff26abbe6946358e0618bb3a3bebf60babec4dd592cfdc60b21919e6d780ef315ea004411c7eace68e58a532925ddec509f9cae76125db03ee031f68f017944c61ecadcc30b1f3ddfc8e128b90102773d3c73566687b7c086b789e3495081001f118dd20a125c144f1681646ab173e20a74bca0cb2b8a7f028fe45665e8a78078d87b03ffdd97d4f7addff7acb5108021198ced9ef0d6b25f1e46f6804fcdcf8ad6d13d083145cb5d6a08b0e09618b12950b16c9e063028e371d3feac8efc4d178107d16ed586db0ccdc8db78a11e9f3d434bf907bbdf13329b42dd99cf2f2a26e0745d4c473851ca8a02bd486c8b478edd955f334eaf5a0eb3f1ebae06f4d2004930244a02c16e4b2b0ce7a37ea844da7514eb4be787162a8f18c6c83f59d86231022a957409fc6d44a0d5526a7f219a68929cbf6a777a97dd172460a85df98dd8c021ac22b337f572018f777d7a8a372d594a75b8465a78f5317741fae03b2198893890fb41ac749c2b9a1de6216a6f8c033577c897a542cfd4e2a4ee2e1f9005a6e51a809055f96beadeb97f2ac9fd15765bc02f23041c1815901476341c7fa2d13ce51697c4546428e90f74ec87eeebf557f41a55902c7e45156c9c94fa2bd539a392ac7bc8c0037a39ca6e72eb3ffeb0d7421fbe4c9c6ee986befcff4ba88ea6870c6cdbfed8c38d68fffeca20ca58c36efac51db5ee660d41f77afa1cf1327f214ada5dca6acfc3260c25a68eb0b21a145b7f375eca25373da47e3ec306080f42a1f6a200897b30ad624aab0af2da5b188054c564c2221eb843f7982f7a12d081e5b7edd1d254eb517c2b6174a4fa1d7cf5833458b147dbd2d5d9499a7ca2e940ded91026bb04a9d436015a9bfae675e2648dc14cce063b98132bd937546fd115fc6297008acd23fe0782db7fbf2db41df87830ce352a6279df32c3f1e7c7f13967df6c03ccfd40ce9216ee7259f2f937c49cd61e7cde48723990740c987bbdff6a512ea4a7ade3b0c7e07e9e6fe77604cf1d2c7d57a45ae02172eeeac3ba01afb4daf4b5fa7c65953ccf7c2064347b4577e31e3a1c1fb90eb7cdce54f69b95cb9f3f917b20f617edd70f2b246da29f1d287a03403b3dce70b40973be0fb78388e9e15b442b9201afdfc21e7b07510117fd8009d59ccb59ca7c9275d1eb6737a75fb8a690efc5e06625ce3f260d0f7103d09511fc84c440995870fd62bdd41f687eb6f28083be2f7f507e1d230f918d352766ef3bb6d4ca71148fd9bdccfc100a576e8a2f916fdb8d03924d749fe70c908074dc2edea1f183a6657c68587f4e603fabb0254137b9daf759bcfb1f411167f2ad39e5f8fe7582c873520f0ae22b893205494bbba77965585bfbe4999cb035c802f671747b90879ef6ff0fa416cd91845f7225e94282135f4c3ceb003a16c2dfd8de10cd0f0d790c70ebfbc33571605b0fa7739f4508c882a455bd40ecf38ae6f4d0bdfa650c83896c0a57f9a64632caa442c443b67798df26"}) r1 = socket(0x10, 0x803, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x0, 0xfc0, 0x0, &(0x7f00000001c0)="b5"}) 09:54:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000080)="a1eeb94bf1f8bb8c0783f0075a0f97a29ac662545102afb4424d4cd0db737c9686e068bd39aa82bd7b79f80eddb1897487a8440179727147ed1939cb297d35110e5049f2617da64af5d12c47042b3b6c2509f6489c7a05f72f9e8d7d2aa96eb31912d7", 0x63, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0xa00000000000000, 0x0) [ 1309.931000][ T28] audit: type=1804 audit(1599472486.328:860): pid=2481 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1260/file1/bus" dev="sda1" ino=16099 res=1 errno=0 09:54:46 executing program 4: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) io_setup(0x800, &(0x7f0000000040)=0x0) fcntl$setstatus(r0, 0x4, 0x64000) io_submit(r2, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) open(&(0x7f0000000000)='./bus\x00', 0x44200, 0x0) 09:54:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1309.995390][ T2495] ptrace attach of "/root/syz-executor.0"[2494] was attempted by "/root/syz-executor.0"[2495] 09:54:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf5ec29954197b5564e6ac851909cf99", 0x75}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:54:46 executing program 2: syz_usb_connect(0x0, 0x67, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006abe180821049900aec90102030109025500010000000009040000000202ff00052406000105240000000d240f0100000000000000000006241a00fdff03202402"], 0x0) [ 1310.227339][ T28] audit: type=1804 audit(1599472486.628:861): pid=2510 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1273/bus" dev="sda1" ino=16289 res=1 errno=0 [ 1310.282823][ T2516] ptrace attach of "/root/syz-executor.0"[2515] was attempted by "/root/syz-executor.0"[2516] [ 1310.331728][ T2511] FAT-fs (loop5): bogus number of reserved sectors [ 1310.387327][ T2511] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1310.451227][ T28] audit: type=1800 audit(1599472486.668:862): pid=2510 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16289 res=0 errno=0 [ 1310.535609][ T28] audit: type=1804 audit(1599472486.718:863): pid=2521 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir467741734/syzkaller.sbp8Bs/1273/bus" dev="sda1" ino=16289 res=1 errno=0 09:54:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2012}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x3e804000, 0x4}) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000300)=0x80) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0x11, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x5800, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) preadv(r2, &(0x7f0000001740)=[{&(0x7f0000001280)=""/34, 0x22}], 0x1, 0x0, 0x0) [ 1310.591835][ T28] audit: type=1800 audit(1599472486.718:864): pid=2521 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16289 res=0 errno=0 [ 1310.671407][ T28] audit: type=1804 audit(1599472486.718:865): pid=2522 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1261/file1/bus" dev="sda1" ino=16165 res=1 errno=0 [ 1310.697585][ T2464] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1310.827512][ T28] audit: type=1804 audit(1599472487.228:866): pid=2534 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1081/bus" dev="sda1" ino=16375 res=1 errno=0 [ 1310.927236][ T28] audit: type=1804 audit(1599472487.258:867): pid=2534 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1081/bus" dev="sda1" ino=16375 res=1 errno=0 [ 1310.952847][ T2464] usb 3-1: Using ep0 maxpacket: 8 [ 1311.023617][ T28] audit: type=1804 audit(1599472487.278:868): pid=2537 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1081/bus" dev="sda1" ino=16375 res=1 errno=0 [ 1311.075262][ T2464] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.132852][ T28] audit: type=1804 audit(1599472487.278:869): pid=2537 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1081/bus" dev="sda1" ino=16375 res=1 errno=0 [ 1311.274907][ T2464] usb 3-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=c9.ae [ 1311.292124][ T2464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.316314][ T2464] usb 3-1: Product: syz [ 1311.326235][ T2464] usb 3-1: Manufacturer: syz [ 1311.336155][ T2464] usb 3-1: SerialNumber: syz [ 1311.351374][ T2464] usbip-host 3-1: 3-1 is not in match_busid table... skip! 09:54:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) 09:54:49 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa2, 0xa2, 0x6, [@datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{}, {}, {}, {}], "cb"}, @typedef, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '#'}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0xc2}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 09:54:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="08002dbd7000ffdbdf25060000003800028008000600010000000800040000f0ffff08000900cc000000080005000500000014000100ac1414aa00000000000000000000000008000400ffffff7f480003"], 0x1}}, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x15}) 09:54:49 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000280)="b95b03b700030005439e40f088a8", 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 09:54:49 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:49 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xea, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x10000}, {{&(0x7f0000000500)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @private1}}, 0x0, &(0x7f0000001900)=[{&(0x7f0000000580)=""/142}, {&(0x7f0000000900)=""/4096}, {&(0x7f0000001ac0)=""/107}, {&(0x7f0000000240)=""/21}, {&(0x7f00000006c0)=""/70}, {&(0x7f0000000740)=""/157}, {&(0x7f0000001c00)=""/68}, {&(0x7f0000000840)}], 0x0, &(0x7f0000001980)=""/152}, 0x380000}, {{&(0x7f0000001a40)=@tipc=@id, 0x0, &(0x7f0000000880)=[{&(0x7f0000000640)=""/92}]}, 0x8}], 0x65, 0x10003, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000280)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffff357, 0x3}, 0x0) ptrace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0x8001, 0xc, 0x2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86430936a4bfba75, @perf_bp={&(0x7f0000000100), 0x3}, 0x18a8f, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000440)) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x64000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private1={0xfc, 0x1, [], 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0xfffffffffffffffc}, {0xc88, 0x6a5a}, 0x80, 0x0, 0x80000000000001, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x1, 0x401, 0x0, 0x2}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) socket$inet6(0xa, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 09:54:49 executing program 0: clone(0x4000002206ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="96", 0x1}], 0x1, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000280)={0x0}) [ 1312.823294][ T2558] ptrace attach of "/root/syz-executor.0"[2557] was attempted by "/root/syz-executor.0"[2558] [ 1312.887848][ T2560] FAT-fs (loop5): bogus number of reserved sectors [ 1312.915023][ T2560] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1313.119884][ T2578] IPVS: ftp: loaded support on port[0] = 21 [ 1313.137604][ T2578] lo speed is unknown, defaulting to 1000 09:54:49 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0xd, 0x4, 0x4, 0x8004, 0x0, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) [ 1313.503823][ T186] tipc: TX() has been purged, node left! 09:54:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0xc8201) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x551f, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1313.607831][ T17] usb 3-1: USB disconnect, device number 6 09:54:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) preadv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0, 0x0) 09:54:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x1770, 0xff00, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 09:54:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r1, 0x70b, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) [ 1313.934394][ T2623] FAT-fs (loop5): bogus number of reserved sectors [ 1313.955714][ T2623] FAT-fs (loop5): Can't find a valid FAT filesystem 09:54:50 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40482, 0x0) write$rfkill(r0, 0x0, 0x0) 09:54:50 executing program 3: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1e3542, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000080)=0x1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x40045402, &(0x7f0000001040)) 09:54:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x18, 0x2800, 0x3}, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000040)=0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000300), &(0x7f0000000200)=@udp}, 0x20) 09:54:50 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11fdff", 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 1314.284046][T28177] usb 1-1: new high-speed USB device number 5 using dummy_hcd 09:54:50 executing program 1: syz_read_part_table(0x0, 0xb784, &(0x7f0000000040)=[{&(0x7f0000000000)="020182ffffff0a000000ff45ac0000ffffff8100e931190000000000000680ffffffa5000000e100e2ff877700720030070081ffffff00000000008000da55aa", 0x40, 0x1c0}]) 09:54:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) dup3(r0, r1, 0x0) 09:54:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{}, {0x3d}, {0x6, 0x0, 0x0, 0x7fff7ffe}]}) 09:54:50 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x900000000000000, &(0x7f0000001540)={0x14, 0x4, 0x200000004, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x302e, 0x2e, 0x5f, 0x80ffff, 0x5f, 0x2e, 0x80ffff, 0x2e, 0x5f, 0x2e, 0x80ffff, 0x5f, 0x48, 0xe0, 0x5f], 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x40) [ 1314.664627][T28177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.710625][T28177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.773144][T28177] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.40 09:54:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@dev, 0x0, 0x0, 0x3, 0x1, 0x70, 0x1f}, 0x20) 09:54:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x21}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) [ 1314.817904][T28177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.883476][T28177] usbip-host 1-1: 1-1 is not in match_busid table... skip! 09:54:53 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x65) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x80605414, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) getpid() sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 09:54:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:54:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3c, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) 09:54:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}) 09:54:53 executing program 4: connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 09:54:53 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9d399d95940ed1daf8000045e7a76d6b5b"], 0x2}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() tkill(r1, 0x33) [ 1316.918137][T16349] usb 1-1: USB disconnect, device number 5 09:54:53 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x4000000001, 0x0) connect(r1, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) unlink(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r3 = socket$unix(0x1, 0x3, 0x0) bind$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) [ 1317.003460][ T2704] FAT-fs (loop5): invalid media value (0x00) 09:54:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 1317.054545][ T2704] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1317.069862][ T2713] ptrace attach of "/root/syz-executor.1"[2710] was attempted by "/root/syz-executor.1"[2713] 09:54:53 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) ftruncate(r0, 0x2008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r2, r1) getsockopt$SO_BINDTODEVICE(r1, 0x6, 0x25, &(0x7f0000000000), 0x20a154cc) [ 1317.149139][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1317.149153][ T28] audit: type=1804 audit(1599472493.549:873): pid=2715 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1264/file1/bus" dev="sda1" ino=16354 res=1 errno=0 09:54:53 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 09:54:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0xe4}, 0x0) getpid() socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4aeb}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x50000124, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[], 0x26}}, 0x14) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f40)=ANY=[@ANYRES32, @ANYBLOB="00000000000000fc853db686f791"], 0x38}}, 0x0) [ 1317.466736][ T28] audit: type=1800 audit(1599472493.869:874): pid=2731 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16360 res=0 errno=0 09:54:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x143042, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105010, 0x0) sendfile(r0, r1, 0x0, 0x800000000006) [ 1317.804254][ T28] audit: type=1804 audit(1599472494.199:875): pid=2745 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir242330298/syzkaller.z9uCxm/24/bus" dev="sda1" ino=16360 res=1 errno=0 [ 1317.809230][ T2743] IPVS: ftp: loaded support on port[0] = 21 [ 1317.917912][ T2743] lo speed is unknown, defaulting to 1000 [ 1318.277228][ T28] audit: type=1800 audit(1599472494.209:876): pid=2745 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16360 res=0 errno=0 09:54:54 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[], 0x65) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x65) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x80605414, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) getpid() sendfile(r1, r1, &(0x7f0000000240), 0x7fff) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) 09:54:54 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x7, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000100)=@tcp6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000200), &(0x7f0000000300)=""/238}, 0x20) [ 1318.603955][ T2747] IPVS: ftp: loaded support on port[0] = 21 [ 1319.286942][ T2747] lo speed is unknown, defaulting to 1000 [ 1321.306714][T25558] tipc: TX() has been purged, node left! [ 1324.117699][T25558] tipc: TX() has been purged, node left! 09:55:00 executing program 3: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb1, 0xb1, 0x4, [@union, @datasec={0x0, 0xb, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], "7f"}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x0, 0x0]}}, 0x0, 0xd0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 09:55:00 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:00 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xc2, 0xe7, 0x40, 0x1b3d, 0x137, 0x385, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0x60, 0x9e}}]}}]}}, 0x0) 09:55:00 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') setns(r0, 0x0) setns(r0, 0x0) 09:55:00 executing program 1: ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000100)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:55:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x30}}, 0x0) [ 1324.429607][ T2819] FAT-fs (loop5): invalid media value (0x00) [ 1324.437204][ T2819] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1324.497492][ T28] audit: type=1804 audit(1599472500.900:877): pid=2819 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1265/file1/bus" dev="sda1" ino=16335 res=1 errno=0 09:55:00 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000340)='./bus\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x0) 09:55:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000008fc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4101, 0xf10}], 0x1}}], 0x400000000000227, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="130000001a000506"], 0x14}}, 0x0) 09:55:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x9, 0xffffffff, 0x3, 0x0, 0x5}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x50) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r7, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) [ 1324.550993][ T2832] ptrace attach of "/root/syz-executor.3"[2830] was attempted by "/root/syz-executor.3"[2832] 09:55:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) close(r0) [ 1324.713117][ T2464] usb 5-1: new high-speed USB device number 8 using dummy_hcd 09:55:01 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0x30}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) [ 1324.931632][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1324.947476][ T28] audit: type=1804 audit(1599472501.350:878): pid=2853 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1088/bus" dev="sda1" ino=16317 res=1 errno=0 09:55:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[], 0x58) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) [ 1325.030422][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1325.059534][ T2849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:55:01 executing program 0: perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="7c011000100001080000000000000000858672d8", @ANYRES32=r2, @ANYBLOB="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"], 0x17c}}, 0x0) connect(r0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180)=0x1ff, 0x4) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000001c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000200)=0x2c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) ptrace$peek(0x3, 0x0, &(0x7f0000000100)) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000b40)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba00a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296dee360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b7259415f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e974477", 0x82}, {&(0x7f0000003280)="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", 0x33a}], 0x2) sendto$inet(r3, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1325.084047][ T2464] usb 5-1: New USB device found, idVendor=1b3d, idProduct=0137, bcdDevice= 3.85 [ 1325.118388][ T2464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.204800][ T2464] usbip-host 5-1: 5-1 is not in match_busid table... skip! 09:55:01 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1325.399025][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1325.469558][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1325.479585][ T2855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1325.615998][ T2878] FAT-fs (loop5): invalid media value (0x00) [ 1325.627701][ T2878] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1325.724078][ T28] audit: type=1804 audit(1599472502.130:879): pid=2878 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1266/file1/bus" dev="sda1" ino=15955 res=1 errno=0 09:55:03 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2f0000001c000507000000000d2300000200041f01000000fc0003c9130001", 0x1f}], 0x1}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 09:55:03 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x26}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x46, 0x0, &(0x7f0000000100)="4d50b441e692763513ef874565580000ff0d00000000122e25d386dd227dcb6470faa27ed2a0ff3862c8112b9bd19802e274d7b70fe661176f27007b9631b3a0291d70d5f32d", 0x0, 0x3fb, 0x0, 0x66, 0xffffff02, &(0x7f0000000000), &(0x7f0000000380)="7045502c9fe7d72a5d725d07000000840c0fa18b214f01adde5b220866f34723aefcc876df83a6915a0a9aed8abea8fce9dca40354f218178eedfd571140c75e8aaafa38e2ecaa6ebfc27f5dc7301c0a85450d3cfc4ceee8968d0ab47f1d829da06a01f82ec4f14d3c692a59db27ece44a0e029488462d11e930e90d5deafb1b5af71d3cd3c053aa34bc8d000000"}, 0x40) 09:55:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x33d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "01002000"}]}}, 0x0}, 0x0) 09:55:03 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x244) sendto$inet6(r0, &(0x7f0000000400)='X', 0x1, 0x44814, 0x0, 0x0) 09:55:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x1, 0xffffffffffffffff, 0x3) 09:55:03 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1327.399889][T28177] usb 5-1: USB disconnect, device number 8 09:55:03 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@func_proto={0x0, 0x0, 0x0, 0x2}, @volatile={0x7, 0x0, 0x0, 0x6, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001340)=""/4073, 0x39, 0xfe9, 0x41}, 0x20) [ 1327.474803][ T2906] FAT-fs (loop5): invalid media value (0x00) [ 1327.488884][ T2906] FAT-fs (loop5): Can't find a valid FAT filesystem 09:55:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8d}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 1327.543900][ T28] audit: type=1804 audit(1599472503.940:880): pid=2906 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1267/file1/bus" dev="sda1" ino=16051 res=1 errno=0 09:55:04 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x191affd, 0x0, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000140)='\x00\x00\x00\x00\x00\xb7\x9d\x00\x00\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) 09:55:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) getpid() pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000180)) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x2f}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 09:55:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcec6aa95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) [ 1327.762965][T16343] usb 4-1: new high-speed USB device number 6 using dummy_hcd 09:55:04 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="02010f0000000a100000ff45ac0000ffffffa6000800000000000000024000ffffffbf000000e1000000887700720030070082ffffff00000000008000da55aa", 0x40, 0x1c0}]) [ 1328.074096][ T2940] loop1: p1 < > p2 p3 p4 [ 1328.079362][ T2940] loop1: partition table partially beyond EOD, truncated [ 1328.118648][ T2940] loop1: p1 start 4106 is beyond EOD, truncated [ 1328.153675][T16343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.155263][ T2940] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 1328.177159][T16343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.201790][T16343] usb 4-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.40 [ 1328.219366][T16343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.229539][ T2940] loop1: p3 start 225 is beyond EOD, truncated [ 1328.253993][T16343] usbip-host 4-1: 4-1 is not in match_busid table... skip! 09:55:04 executing program 4: unshare(0x44000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchmod(0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2}}) [ 1328.312492][ T2940] loop1: p4 size 3657465856 extends beyond EOD, truncated 09:55:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1328.488164][ T2948] IPVS: ftp: loaded support on port[0] = 21 [ 1328.537943][ T2940] loop1: p1 < > p2 p3 p4 [ 1328.545841][ T2940] loop1: partition table partially beyond EOD, truncated [ 1328.572473][ T2940] loop1: p1 start 4106 is beyond EOD, truncated [ 1328.575913][ T2958] FAT-fs (loop5): invalid media value (0x00) [ 1328.590036][ T2948] lo speed is unknown, defaulting to 1000 [ 1328.595059][ T2958] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1328.599554][ T2940] loop1: p2 size 1073872896 extends beyond EOD, truncated [ 1328.631003][ T2940] loop1: p3 start 225 is beyond EOD, truncated [ 1328.649571][ T2940] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 1328.676906][ T28] audit: type=1804 audit(1599472505.070:881): pid=2958 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1268/file1/bus" dev="sda1" ino=16382 res=1 errno=0 [ 1329.266433][ T2954] IPVS: ftp: loaded support on port[0] = 21 [ 1329.374117][ T2954] lo speed is unknown, defaulting to 1000 [ 1329.824662][ T21] tipc: TX() has been purged, node left! 09:55:06 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x10, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x19]}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000001a80)}, 0x10) 09:55:06 executing program 2: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 09:55:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000340)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000780)={0x0, 0x0, "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", "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"}) 09:55:06 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280)="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", &(0x7f0000001280)}}, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) syslog(0x2, &(0x7f0000000080)=""/90, 0x5a) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 09:55:06 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400", 0x15}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:06 executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000100), 0x1}, 0x20) [ 1330.428979][ T2464] usb 4-1: USB disconnect, device number 6 09:55:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x100}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, [], 0x1}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 09:55:07 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x20) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="9be7974865753876c63ab5564eeb6ae896d6cb08816df0113a2455b5039f2e74e1a90704d725f1f1f7fff93566493702005e4646796e5700cc3a01d4"], 0x65) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x89}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000100)=@v1={0x1000000, [{0x2}]}, 0xc, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) fcntl$setpipe(r5, 0x407, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x88, 0x2, 0x9, 0x3, 0x0, 0x0, {0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, [], 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1330.596214][ T28] audit: type=1804 audit(1599472506.990:882): pid=3041 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211179783/syzkaller.K6uK0d/129/file1/bus" dev="loop1" ino=56 res=1 errno=0 [ 1330.625957][ T3039] FAT-fs (loop5): invalid media value (0x00) 09:55:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d00000000", 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 09:55:07 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x34}}, 0x0) [ 1330.675116][ T3039] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1330.720754][ T28] audit: type=1804 audit(1599472507.070:883): pid=3044 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1269/file1/bus" dev="sda1" ino=16210 res=1 errno=0 [ 1330.850740][ T3057] tipc: Enabling of bearer rejected, failed to enable media [ 1330.951175][ T3062] tipc: Enabling of bearer rejected, failed to enable media 09:55:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 1331.360223][ T28] audit: type=1804 audit(1599472507.750:884): pid=3067 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir211179783/syzkaller.K6uK0d/129/file1/bus" dev="loop1" ino=56 res=1 errno=0 09:55:07 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:07 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) [ 1331.581229][ T28] audit: type=1804 audit(1599472507.970:885): pid=3045 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir211179783/syzkaller.K6uK0d/129/file1/bus" dev="loop1" ino=56 res=1 errno=0 09:55:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) 09:55:08 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0xfffffffc}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 09:55:08 executing program 0: socket$inet6(0xa, 0x3, 0x9) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40007, 0x0}}], 0x4000000000003be, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x9) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1331.777392][ T3077] FAT-fs (loop5): bogus number of FAT sectors [ 1331.800472][ T3077] FAT-fs (loop5): Can't find a valid FAT filesystem 09:55:08 executing program 4: socketpair$unix(0x1, 0x46d38015fdb123bf, 0x0, 0x0) [ 1331.899913][ T28] audit: type=1804 audit(1599472508.290:886): pid=3077 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1270/file1/bus" dev="sda1" ino=16354 res=1 errno=0 09:55:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 09:55:08 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r2 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) get_robust_list(0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x40000, 0x0) recvmmsg(r3, &(0x7f0000003200)=[{{&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=""/184, 0xb8}, 0x80000001}, {{&(0x7f0000000740)=@tipc, 0x80, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/185, 0xb9}, {&(0x7f0000000500)=""/26, 0x1a}, {&(0x7f0000000880)=""/129, 0x81}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000a40)=""/51, 0x33}, {&(0x7f0000000a80)=""/158, 0x9e}], 0x6, &(0x7f0000000bc0)=""/161, 0xa1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}], 0x1, &(0x7f0000000e00)=""/243, 0xf3}}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002c80)=""/55, 0x37}], 0x1, &(0x7f0000002d00)=""/71, 0x47}}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003000)=""/192, 0xc0}], 0x1, &(0x7f0000003100)=""/204, 0xcc}, 0x4}], 0x8, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x16, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 09:55:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdf2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') perf_event_open(&(0x7f0000000700)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r0, &(0x7f0000000340)=ANY=[], 0x4b) sendfile(r0, r0, &(0x7f0000000200), 0xa198) [ 1332.482630][ T17] Bluetooth: hci1: command 0x0406 tx timeout 09:55:09 executing program 2: ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000000)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6e0fe6ea2cd36efecfe2dd9f9ec1e7b23b2ede490fd56769cfa6c3a468000000c6f5512db3e2be521da27d76ce970484283a08b2e8b7f6d1f5e423f03c9a2834ea16fae061560e99078f31ca8bf504b33eadc73de7d558e6cc117020738b489415dcd2915460ae92b656c94ef3dd3c157fd1", 0xd1}], 0x4, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x3, 0x9, 0x0, {0x0, 0x400000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01}}}, 0x78) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x2, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) 09:55:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:09 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x81, 0xa8a1}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000180)=0x7fffffff, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 1332.941286][ T3113] ptrace attach of "/root/syz-executor.2"[3111] was attempted by "/root/syz-executor.2"[3113] 09:55:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000000040)={@remote={0xac, 0x2}, @broadcast}, 0x2) [ 1332.990114][ T3112] FAT-fs (loop5): bogus number of FAT sectors [ 1333.074432][ T28] audit: type=1804 audit(1599472509.470:887): pid=3117 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1271/file1/bus" dev="sda1" ino=16358 res=1 errno=0 [ 1333.081790][ T3112] FAT-fs (loop5): Can't find a valid FAT filesystem 09:55:09 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x800, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e25, @private=0xa010101}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000001f80)={0x0, 0x0, 0x0, [0x6, 0x1, 0x5, 0xfff, 0x100000000], [0x1, 0x1f, 0x3ec, 0x4, 0x7f, 0xfff8000000000000, 0xffffffffffffffff, 0x9, 0x0, 0x6, 0xd7, 0x7, 0x2, 0x7ff, 0x4, 0x69b, 0x7fff, 0x0, 0x4, 0x2, 0xab1, 0x1, 0x1ff, 0x4, 0x25, 0x800, 0x1, 0x200, 0x22, 0x1, 0x4, 0xfff, 0x4, 0x800, 0x5, 0x3, 0x5, 0x7, 0x0, 0xfff, 0x3, 0x6, 0x0, 0x5, 0x8001, 0x5, 0x3, 0x5, 0x401, 0x7f, 0x200, 0x9, 0x7, 0xff, 0x7, 0x4, 0x8, 0x4, 0x9, 0x4, 0x1000, 0xfff, 0x0, 0xffffffff00000001, 0xfffffffffffffeff, 0x4, 0xfffffffffffffff7, 0xfffffffffffffffb, 0x3, 0xffffffffffff8000, 0x20, 0x1, 0x86b, 0x0, 0x1f, 0x3, 0x5, 0x0, 0x0, 0x2dae, 0x300000, 0x0, 0x8f, 0x0, 0x7c1d6e7b, 0x9, 0x0, 0x5, 0x800, 0x2, 0x0, 0x9, 0x52e9446e, 0x100000000, 0x7, 0x200, 0x81, 0x2, 0x58, 0x1, 0x800, 0x0, 0x7f, 0x9, 0x3, 0x0, 0x0, 0x1, 0x3, 0xffffffff, 0x2, 0x0, 0xffffffffffffff57, 0xff, 0x81, 0x8, 0xf0, 0x7, 0xaa, 0x2, 0x7]}) 09:55:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x6}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x8940, 0x208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4020010, 0xffffffffffffffff, 0x7127b000) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x187) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x100045) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) 09:55:09 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f8", 0x16}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1333.633099][ T3138] FAT-fs (loop5): bogus number of FAT sectors [ 1333.650371][ T3138] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1333.730566][ T28] audit: type=1804 audit(1599472510.120:888): pid=3138 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1272/file1/bus" dev="sda1" ino=16034 res=1 errno=0 09:55:11 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x1, 0x3) memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) sendfile(r0, r1, 0x0, 0xffff000b) 09:55:11 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000080)='./file0\x00', r1, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {}, [{}, {}], {}, [], {0x10, 0x2}}, 0x34, 0x0) chdir(&(0x7f0000000100)='./file0\x00') 09:55:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb4, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"000300"}}, 0xfffffc41) utimes(&(0x7f00000001c0)='./bus\x00', 0x0) setxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='security.evm\x00', 0x0, 0x0, 0x0) 09:55:11 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_TIOCOUTQ(r2, 0x5411, 0x0) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000b40)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba00a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296dee360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b7259415f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b000000", 0x8b}, {&(0x7f0000003280)="1bc72bd99d387d8075383aed46af6ec268f859d9744a10c8770b29c4d0b553d501330c10d16ad73644a81fbfb06c5bdeabcf39139157ec0b873a66269136dd0e797f24afcf068b6a79a643c56a4e3b3b0405ebe8db0c3b36437db5f1181a2d2efa7fecb51cfeb2e399c32b9d0dc29949eae7194d1e1e0171e343931188508cb6142b954358aadf387e68ae5486c73bb635c399a755bcf6b71b494b491727d4959b871e701213b8452690cc8ba94394e6244e455830f16e166ee38c2a4d98a70e39f0fddf45b6a79037aeabe2c8245da4acdd3b148558568d1ea7a8a4c491d7465dec61bd80a9883e2f94abfa3d6872a357b7d15748d2bcd26b47a55e9f81099d61cebd8561f56781dc699812bd3064ca34e19b65cb95e510b7c9cda8cd5f631094d953ff7203b06784438784c01042679540076aee842bcef98fbedfae2581e1258f0cecf99cef4c0e1231577f6cc4308c8d0e13d1e7af3c3bc2884ec46a38793d9fb2ad5f22efcd91e61ce2bdb9569ac60cce629853a693bf5136357f8ee729c1b3ad37a4210f9c4f112b17cbe13251877297d7940510850b731039680e61ce7ce9801f5a0fc417fc7deb623063cb1dd9d3627579aff98187b57179c51c990d912373b0716d4a93c26bbe0169cedabc3c09e9cbdc4fab4cc631c99cda7f090dd5e1b2e61d2fc5543f62b2665bd9f8c38b0e7b90dca8d53f890f148e50c2635a1c1a301398eff903d6eda5d7b3af30b6fe8617e57c9513099fce85d899e358d094a9a3841c1ee7766ce7f3cf1e4a541b11fe1b06280a5480c4f0c2c33b1e66ad2aa5f172680b", 0x246}], 0x2) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 09:55:11 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x29}, 0x20) 09:55:11 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:11 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0xd}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000029c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0, 0x3400) [ 1335.169565][ T28] audit: type=1804 audit(1599472511.560:889): pid=3166 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1273/file1/bus" dev="loop5" ino=57 res=1 errno=0 [ 1335.169993][ T3166] attempt to access beyond end of device 09:55:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0fad7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000140)={0x3, {{0x2, 0x4e23, @multicast1=0xe0000500}}, {{0x2, 0x4e20, @remote}}}, 0x108) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) writev(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)="285f0b6ef597c70bd7654e5c484e7c83969d956a7c04fb9d01ecfc32a8387576c7bcc85c937d1e3d", 0x28}, {&(0x7f0000000300)="578cf1e26ffbeb6c611c3bef7c29918a2d06c134d250fbf852100c790bc488a6b43482f6549bec8de6059681676ebf49a10d2b6fd168194a83f68aaaeb4ca14641b8ea3eebced2ae5c832ca632f7b8789fb903b62af6b51bd995e49aaec7fa577700a0fc4e768b250a119a094f", 0x6d}, {&(0x7f0000000380)="10be6a56670cd659a4c26b93a5f1afbfca8617a8e760fbfb8a711a7c3934932d12608c96a9c0c37f9264a9e6e0ba1be82237ff1966311c7804c1359caa098f0b27f45bd82628eb886e19588eb95fe0908d7bc1cf9d6c720a14ef08fbe995ea08f972655b88df1376577985c1632ccb046b6ae1cddfa3640fa7e10b8c713cfac8f3d1dc82b773b5acfd04d71c343d0062fd359461ac3e6993468a78be73aae263b18bceb9d6c1b93d06db6cef24aa3e8d418657ed0cf5b6a1191e2481538d6c4d9e689a31d4ff9e14892bddee9cd32ce009d24fbf24ab14b16ebefb7d9dfa4aad641295fce71ce5957f3b8f76ea6a2537c8", 0xf1}], 0x3) r4 = fcntl$dupfd(r1, 0x0, r1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) poll(&(0x7f0000000300)=[{r7}], 0x1, 0x359) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB='Hmax']) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f00000004c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS3\x00', 0x101401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x3e9, 0x202, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x0, 0xffffffba, 0x2, 0x80000000, 0x1, 0x0, 0x40}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1335.313165][ T28] audit: type=1804 audit(1599472511.710:890): pid=3179 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1101/file1/bus" dev="loop0" ino=58 res=1 errno=0 [ 1335.391702][ T28] audit: type=1804 audit(1599472511.710:891): pid=3179 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1101/file1/bus" dev="loop0" ino=58 res=1 errno=0 [ 1335.401894][ T3166] loop5: rw=2049, want=66, limit=60 [ 1335.589379][ T3180] attempt to access beyond end of device [ 1335.595346][ T3180] loop5: rw=2049, want=68, limit=60 [ 1335.629168][ T3180] buffer_io_error: 34 callbacks suppressed [ 1335.629179][ T3180] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1335.690229][ T3180] attempt to access beyond end of device [ 1335.710896][ T3180] loop5: rw=2049, want=70, limit=60 [ 1335.732398][ T3180] Buffer I/O error on dev loop5, logical block 34, lost async page write 09:55:12 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1336.081008][ T28] audit: type=1804 audit(1599472512.471:892): pid=3213 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1101/file1/bus" dev="loop0" ino=58 res=1 errno=0 09:55:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0x0, 0xd0e0000, 0x0, 0x100, 0x150, 0x1d8, 0x1d8, 0x150, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 1336.220862][ T3219] attempt to access beyond end of device [ 1336.243826][ T28] audit: type=1804 audit(1599472512.501:893): pid=3179 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir894986218/syzkaller.mP0aGB/1101/file1/bus" dev="loop0" ino=58 res=1 errno=0 [ 1336.275972][ T3219] loop5: rw=2049, want=66, limit=60 09:55:12 executing program 3: socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair(0x29, 0xa, 0x9, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000001740)="d4c65f0c7bbebdb8702538ba76ee70389977d651287ea2663ac5bc5a8d5b5bb4a325474330fee7f49e276fe4e90188ceef0a173adf3ec5d6a543f7a2de5550ba77b4ab18b7a8ae43ddf73a09d06f6dfd3f99056bd37bcabae7f9c13bc4fa28445a90c31614687d3184a8a6d7f38c1892a60dd30341e3527c74693347eaf238281492c8638b4a3f7c616b185e9d8c1c0b681a26f6f6d1b772813237b77c9af159505e1ff6ebe79559ae0efc59cb4e442ea3d9f0277dc7dd5228b1902c14b890cab08e2fe68a0a3dfed118a6de9643ed2e0b14fdebb1cf0f0eb32fa7d4ebed3a122f22b000276e3e01270b9eee007080badf84b8aba8a3dbcbc2a34aba74fd08521a7aba804ef1d9ee48a352d26b84775ac8fc4e585e12dec63d1ce33650d6c06579b522bb03ab0484cfc34c5e30648b8dc67ed40d5ffc265303f8083b911f9b7b353604dbe8997902088876574f6bf652c8a3fd7ac7426b358e33e6bda0a9f6710ee50066130200000000000000ae30bf27b714b843568ccb3a600b907eeefeefcafea2cdb3fda757317d8d62d921c29d2b8e9540550664b13e680359a6451065f0874b2f527f2ef388dc83e8adf1234e5b1afb92c5aa9d94848b2863601d0feb87beeab5a23ed9e20b5d0f97f8ea057f01b1616b62f281ec8bfbfb56aadc042ff5bfdbb1914e6d01c6921f8585874260496909b3cb0e98d80566720e747ca33b3ef5b7673740b5c52fbf3055f74979eecd2d1734d24b6d4fae549fa261b299b05688bb9d669acdcef742ce1bc151ec7c9a3c91fc632665f7ab40e3a65d026c5c53240347a7c96e3b490aedec9bc53d1ea8204efc64dd3a2be44446049f56cbca1928af793885fbdc5ac6ed5dac10e28fe8e43629e5b52069ee1933c3bd4962d3e46efa45b62b4b2bf3aa45f49106bceefae138810b79d44c9a291f6bb829dc3a51d6a74de9034942a87971d3c8134350fff6f31faa1c3a15ed4a1747e3d6357ede1f300ffa42db213c2a631bf079afb5f85bc22b98f5bb4d4b3fa4f98a31121a12c915edb5a26fe357a35a99e2c7e86d4a1cb5d18249c1ef34fd4a9b2076e193be685ff59a606846e702bf3d5cb8ab46152e1c352f1493de76bfec450d8713297cfc13a13e104a3f68543235e54fe1a4c554746d6d75a980fe9f17b909fc631c9e4a3cb96aa1288d024a2ee317ddbc4be00bd0abeb829530de94c462eaa417589862a09ced3dcc83ce3717b18817b093c767810e8c174138f83dfd3d346c765b450b9f3ad4ea39ef2c3b77632748d72952b97b5941dc7e4f23fbe6d6132d82f224febd211a857bdcd411806fd7ae7ca5dd4f516f905538d7758f36117dbf845135ff5d06dad94597ef23ab06f513955c35f3d77466870e168248bbe109ef697ab49b287529404deccad9a17d1b4dcf3da8a80a6af31a53ad4b5bfc00def32cd9f5964b0851b03c49cbb7e6f88c44c43cadbafb249f37f4ecd20f661f5b6ba4330500e4bf7308f69e3b8557e42f130715dbde687694c0fcd53b64abdd12ea7ed663a00606bcda776f131d259c414b5dac86a8fd07c8037a2ef37558a25fba19fa41977307eca047c4f00fe9bcab6392e585b09673e85b8d7ad86ed9796422c7071c8205e7a859e6387ac759bf8f21e91098d708036139e2e52f10e2d46594a42a4d55012323af17c85910e8819c504b2a1272fb21ff55b05f211b151fc5a27995cd8dc98af48b31939e63ede2225f4f6d366c2843bbfa4334b022e6685058e77acb30388da0b2b202c0c73c4ce8c5dd635ced1d33eefe8de816e9455aa7f788211450f5f36e3d5cfb26bd2ec51322432bcfe8b5f6258cc62993e3ffcacec2c2a35cdecaf5677a583116352a56990b219d8ec72c7db52f5642dddf7fe216422d19def0cb1e1804a3547995fd8da4fa58c9f21972894f7dcaab6d5db9461222df1b15e69d986730496131b2b3b45b0b012f285dcca21b7f7ebe84dc54f743bf8d0ee29951d583329bf6ce0ba4bfc845c78d5c90f0725d51dae4d8918162bbf33e885bd49073a58ac6e4305df3f9b221e085361d01eca6b9e0f65c1d73d226b3a8e38db30fe85fcbd97f9739cd9e37763540fd4f9b55a135c42ad19ba0214f98bb9479d5a6fc2df5ea707028850eb127813933478979691e01d5fda69d507a6ab701621a0f37b96adb62fa96591d08249d657066bf8549a714d28a5dcfab849873792a2dee8fd06b23b54d3fe9f5de641ff8973353307d7691da79d11633450286d539b63d55be021c201b7f5c9a2fe57fd6c2e85bbf396bb1efaf7595dc81d0d34d5f3e22c33a8bc795635355468ad75f8dd5100b3dcf5b1c1b7097d20e20003e07300d1c40ab111eba44dcc1830a4bd468ec4b10e6968008d65b7ae8b6aa471c2b2d6396ad4dd4c0ee02fd2ec2ae189fc43158dc58761fb8ba5a880053b4cc1b211ca925ed8ded7ed00546da1e36b8992e932426f844ed45b1ed70b231c0ff7d51c3033644ae876e3ef12a5a304339a9536b81d8083610db1a8052fdeba35651ce8f346bad2981e75ae6e62839a1c595ca745d3c0e8d69cafd7e0fb61ebf81b96af33af0b4117b3ab2357740f10bd306a9e65370aa8a13a0d4d834a7394dc5deea28cfc0f3e22f7851a1b61efef92366e2c356ea2b544ceb320a61d90392b7069426b7dcc9fc9667d8acde3ba9fec5fca3351534484f01b55a78621d24084d7bbb6ba00672b8288c33509bee6b1a419dccce5c8ad2700153fb99c3bed7c53865b258b86928ea3ad5816c59078db102100f459fece52b17802d4bbb4441e58e34b5aacef14488bf80ea6c0d3d5b5eb6fc447ee94c406c0cac02ac593d1eddc3c77bc8e5f9aa2bdfe414bc91307b77888cdae2b3759395896c47d0738d162381c20428fbf47d92fdf50b78744cb00c83db88ec902111660978447859b84eed4aa9227d84469cda66e961364baded94f5c1b7b98e9092e9d5a50b4ed699908ac7687f7f8d509e9f748310fc5d425960cefe1232b2492a12e30576f83f079969b124c8fcd28ea3962faee5c9637ee2282f1d77fbe63d25711168f1357c89bf42723e26d023a404b372b7029a6157fb89274512efbed083e94903060467cf346ea017d6830bb248d48c226f7bf65eeebc450e279bb478a2949c2a84f70235895e844f6f4d67632771f2ace481a102ce19451b0ac6b50bc1a0a5dbf1813f1c5d5c9dbd2c529b2af8528ac6f0df6ddd4869b22bb4c7d8cc902b33b53f8ea548dac293b3b93e7861c36856776e45ff353c2fc345f35d05546a9d4bb84f9478c7017d28a4f831117eaefee4d97e8a5278ee0787793d46a47c8a892018d6d2e97d6eec124785bbf0d33f1a58149736a806dcc9331ad300589586ae7b8e0463fa48e6afb29d8e479d5f72acf93eec5c2079a85ffe7b992639e11b0d602c2df580823e64e29a11b2ec9a4ea1abc49e69756e9593481c257a40ce2f1753468f36429ba5c167126ee2afb2b3b3619aa5bc2366c857d482da2c6d370694c0bf2dd155faf1a6c3da35de787d7438fb74d76232ac344e5a28848482afb228264d25469fc60a1c940186aacc28c3e92dd82c8c70ab369ff96a8c89dc6d9af9a6865fb49e45a380ce65846d3001b7ca00b522989632f9dcd3a2f9592a5e8cdae984c32a89401bca6478efc24e49dc2a1e35245dd2d426b7796d22e27e52ebbbabe786d7c87056b1ce034123404ea76a6e35d4680264f4f778ed2938308468c8869fe50ac3bf295d8b3843cff5d62884a3870678b0aa55698b3a891f68aec57c243eb646146f67f30821f81d6cd5bb82f6c26378a36d1633259954a0427e842446b712740305f85cfcc79bb2cade6da39b6443ec799bfb73c07a44202cd9c497b8d892e4c3bccf797c9d7fadba10cd3643a589904f372221c43ad51c1c9eef86a1edaa53ecf2eea68d81f8a829866325e028e7879e9b4f3261a7f0457b50110ced33dd935ba419d7b7d0ed983b2542271b160256138c01e98ef50038e5d39654f484ac24ce1f907e2b43f061bc52cf7e87cd06642c575960e56e3ea5cd0fea81050fb764793030c475a6bfbe0c76a576819cc6f4b510d908dd83ca1af0d079db1faec479b0dc2788aa322ba199f3ecbf3ff5e5e440ffefeda37f9549245f73743cf21b7f40b1277d0d836c9b9d17ada955a2c908be0376ee6c46689d99f75fdb9acc944cf6115a297aab5445738199dc38deedbb7be0cf2c77d0c8f447518de9329fc73d355f4bae104ec1e27f9e85bed5a434b35e6c1bcef515c3b88ed61d2e62709a09128e9b04bbd5ecc1b66b3f9a4b3f5720c1818636c3b2fb3976589eb66c6f5f2922435cb744d08a9ff72e0373a792f000f924fced5a91fd5acf42ba03e748e758500433c5c3c4d479b65a0c92c8cbe7dfd0026eeba6afc872106f7bf5cbac14a52b3673ee626c180bcd91f9175a329b270fb0cf2a2e012f9c2ca7704bfde15164395990a86e62f0fb1ca79b799042475aacaab8fa2ba38c560026ced544031f6e245bca53659341e493018a91a96150ed546669a1ea3066ebee89d35890dc7a917815b445f1ae69a8eb4161cd106f3596b0ea08d316a4e385c9dc491f7c1de8b17ba53e5b64bb9fbdca70d53070391877e78ac8d6e89a6d2a90441aaafc8bea4922c56024efee33308d495913f0c5e93e7729c1c19e10752e403a8f86525eb45b26bade82fe5f64c518e4fc391baf5cd8c51eb71c3189f0b679bbc6bc4b3977b4bdc99e798bd93fb86b9d78fea870d937907225f70099e0f017a5e0ae7f731fd4d2bea9fb6c9e58f1f974945b1eb334b2407a68d59652b1945bdf9ee64a37c6f7cb288786fa1c996bc16fcf8c61003764f13b421f9d6f9ad5ceb2fb8ffe3d66157a3c28e43d1b0548a8cfa456a24a684bc67ebcafc1a3380ff47d838fa161c5c91d842ade47aaef726293ff54f556d030a2521e92c8bbc95a79651c817bd4e9e673d773b30641467d79b59b8914610228b16a92e1dafa04c41d3ee412238cb958290f08d65a55360b423eee704cc694a94c98b3cc6a588bcc27ed25f4e08412df4fd1523c6cf355", 0xe00) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ab8000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) [ 1336.327138][ T3223] attempt to access beyond end of device [ 1336.333440][ T3223] loop5: rw=2049, want=68, limit=60 [ 1336.341977][ T28] audit: type=1804 audit(1599472512.611:894): pid=3219 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1274/file1/bus" dev="loop5" ino=59 res=1 errno=0 09:55:12 executing program 4: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x5}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1336.377765][ T3223] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1336.412559][ T3223] attempt to access beyond end of device [ 1336.432083][ T3223] loop5: rw=2049, want=70, limit=60 [ 1336.449879][ T3223] Buffer I/O error on dev loop5, logical block 34, lost async page write 09:55:13 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x4009) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 09:55:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, "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"}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:13 executing program 4: setrlimit(0xa4132ffd8e285734, &(0x7f0000000080)) [ 1343.086788][ T3191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.095408][ T3191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.811819][ T3191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.231785][ T3191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 09:55:30 executing program 1: syz_open_procfs(0x0, &(0x7f0000000940)='net/rt_cache\x00') 09:55:30 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}) 09:55:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, "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"}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x0) dup2(r0, r1) r2 = open(0x0, 0x140042, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x28681ad94d43cb86, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10004040) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 09:55:30 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x4009) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) 09:55:30 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, "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"}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1354.514796][ T3281] hub 2-0:1.0: USB hub found 09:55:30 executing program 4: r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(r0, r1) [ 1354.546798][ T3281] hub 2-0:1.0: 1 port detected 09:55:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)="1f0dd81d1e92753e43113d17b186ec0588ac911640676e5260a74cc0da3dd4769c9e725b0572aca706516bd943227a2c46c94956bf6dbb4f80424d3fd16c2523ef5048fcd09d10990fcb1050384f162f2f552a79693f0429b1674ab4a12f381931e99295b23d6f12", 0x5000) 09:55:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) syz_open_dev$hidraw(&(0x7f00000000c0)='/dev/hidraw#\x00', 0x0, 0x0) dup2(r0, r1) r2 = open(0x0, 0x140042, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x28681ad94d43cb86, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10004040) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 1354.709699][ T28] audit: type=1804 audit(1599472531.102:895): pid=3287 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1275/file1/bus" dev="loop5" ino=60 res=1 errno=0 [ 1354.711529][ T3287] attempt to access beyond end of device [ 1354.741461][ T3287] loop5: rw=2049, want=66, limit=60 [ 1354.749000][ T3287] attempt to access beyond end of device [ 1354.770640][ T3287] loop5: rw=2049, want=68, limit=60 [ 1354.775875][ T3287] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1354.789891][ T3287] attempt to access beyond end of device [ 1354.805510][ T3287] loop5: rw=2049, want=70, limit=60 09:55:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x0, 0x0, "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"}) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1354.821730][ T3287] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1354.834128][ T3302] hub 2-0:1.0: USB hub found [ 1354.845700][ T3302] hub 2-0:1.0: 1 port detected 09:55:31 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:31 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1e, 0x3}, 0x2000000c, &(0x7f0000000180)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 09:55:31 executing program 2: unshare(0x400) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, 0x0, 0x0) 09:55:31 executing program 1: futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1355.233495][ T3322] usb usb2: usbfs: process 3322 (syz-executor.0) did not claim interface 0 before use [ 1355.484731][ T28] audit: type=1804 audit(1599472531.882:896): pid=3330 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1276/file1/bus" dev="sda1" ino=16354 res=1 errno=0 [ 1355.739541][ T21] tipc: TX() has been purged, node left! 09:55:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) getrlimit(0x3, &(0x7f0000000100)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}, 0xffffff00}, {{0x0, 0x0, 0x0}}], 0x3, 0x20, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000680)='./bus\x00', 0x1c7) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) 09:55:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, 0x1, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) 09:55:36 executing program 1: futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in6=@local, @in6=@mcast1}, {{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0xffffffff}}}, 0x128}}, 0x0) 09:55:36 executing program 0: ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:36 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:36 executing program 0: ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x13\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\'\x89h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x00'/214) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000400)='\x00\x00\t\x13\x00\x00\x00\x01\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\x00\x01\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0u\xba\xfc\x00\xc2\x19\x02\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82J\x00\x00\x00h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00H\x06\x00\x00\x00\x00\x00\x00\x00>\xfdb\x18+C\xdd\xaaV\xf1\xdbjE\x01\xd1sD\x89\x94&\\U1\xdc-\'\x01\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x92\xe6&\x87\xd3\xc1\xd2\b\x95*\x10\'Lh\x97~\x00\x00\x00\x00\x00\x00\x00\x00\x00t@\xcd\x15\xe9\x91q\x89Z\xdf\x1a\xb7\x04\x84\x82\xddq\xed\xb3\x1d\xd2\xa1\f') ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x12\xf4V\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\"S\x15\x031\x87\xec\xc1\x9b$\x92\xad\xc4\x04\xdc\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0e\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x875\xda\xffutB-\xdf=\t7\x96\x1a\xad\xd0\xd0u\xba\xfc\x00\xc2\x19\x02\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\x17Bn\x17h\x1b\xac\xfc\x82J\x00\x00\x00h\xd5\xc0\xb4a \x15\x9a\x9f\xf0:\xfd\x9a|b\xe2\xff\xee\xc4\x99G\x82\x16\xbf\xe3c\x8d \x01\x00\x00\x00\x01\x00\x00\x00\xcb\xde\x05\xfe[H\x06\x00\x00\x00\x00\x00\x00\x00>\xfdb\xbfJ\xd2\xe3\xbf96f\x94\x02!A\xa9\x18+\x00\x00\x00\x00\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\x01\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\xf3\x7f^\x9b\xa3\x9cy\x92\xe6&\x87\x1b\xe1\xec\xcb\xa7\xeb\xaa/T\xc8\x7fs\x96\xb1 \xfa\xd2\xcd\x0e)\x89c\xd5\xe2\x1b\x91\x83\xd1&\xd4\xaf\xfc*\x1c\xc2\xfa\x972\x0e\x9c\xcd\x1e\f\x06\xc9\xadc\xb0\xea\x15s\xc9PP\xa4\xfd\x1c\rkpb\xf1R\xdc\xe5\xb1[r\xac\x1f\x84a\x17\x04\xd6\x8bc[\x92X\xaa/\f\x90\xb8u\xb2\"Q\x85\x02\xcf\xecu\"\xff\xab>A@:\xad]\xd8\xe65\x13\xd16P\xad\x9c\xcd\xc5\x04\x84@\x86[\xf4\x98T\xecJ|\xab\x02\x9d\x16\xcdl$\xa6\xa5{XU\xbef\xce\xd6\xd3\xbf8n\x80\x93\xb4\x92\b\a<4\xa0bYW\xb7\xcf\x91d\xf4\xc2\xeaG2\x87\x9d\xc8\\\xd9_\xd9m\x8d)\xdc\n\x00\xc0cJ-\xf5Nb\x18\x00\xe4\xb5\xc7K\x1f\xad\x91\x89%\xc4\xcb\xb3\x04pJq\xba\x9b8\xef\xd9\r\xcb\x8a\x94K\x7f\xeb\xba\xe5\xaa\x01\x9af\xdc\x02\xe3\xa3\xf7N]\xca\xfe\x11S`\xee{a\x19\xc9\xd4\xb1\x99K\xb0\x96\x18\xd52\b$w\xf0\xd0\xfcx\x10n\xea\x01\xe4\xa4\x81\xd75') [ 1360.418959][ T28] audit: type=1804 audit(1599472536.813:897): pid=3352 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1277/file1/bus" dev="sda1" ino=16360 res=1 errno=0 09:55:36 executing program 4: unshare(0x44000600) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xffffffff00000000, 0x0) 09:55:37 executing program 1: futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) [ 1360.609122][ T28] audit: type=1804 audit(1599472537.003:898): pid=3378 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1099/bus" dev="sda1" ino=15942 res=1 errno=0 09:55:37 executing program 0: ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1360.816763][ T3381] IPVS: ftp: loaded support on port[0] = 21 [ 1360.947098][ T28] audit: type=1804 audit(1599472537.053:899): pid=3379 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir937369609/syzkaller.Mh0SZm/1099/bus" dev="sda1" ino=15942 res=1 errno=0 09:55:37 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @empty}}, 0x1e) [ 1361.069560][ T3383] overlayfs: failed to resolve './bus': -2 [ 1361.171127][ T3381] lo speed is unknown, defaulting to 1000 09:55:37 executing program 3: unshare(0x64040600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4010744d, &(0x7f0000000040)) 09:55:37 executing program 1: futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:37 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x6) dup3(r1, r0, 0x0) 09:55:37 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:37 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1361.517685][ T3383] IPVS: ftp: loaded support on port[0] = 21 09:55:38 executing program 1: futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:38 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1361.692512][ T3409] overlayfs: failed to resolve './bus': -2 [ 1361.751802][ T28] audit: type=1804 audit(1599472538.153:900): pid=3415 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1278/file1/bus" dev="sda1" ino=16320 res=1 errno=0 [ 1361.851575][ T3425] IPVS: ftp: loaded support on port[0] = 21 [ 1362.049875][ T3383] lo speed is unknown, defaulting to 1000 [ 1362.513159][ T3425] lo speed is unknown, defaulting to 1000 [ 1362.694915][ T3434] IPVS: ftp: loaded support on port[0] = 21 09:55:43 executing program 4: unshare(0x44000600) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xffffffff00000000, 0x0) 09:55:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) ftruncate(r1, 0x0) 09:55:43 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:43 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@typedef, @const]}, {0x0, [0x0]}}, 0x0, 0x33}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1366.831461][ T3553] ptrace attach of "/root/syz-executor.2"[3551] was attempted by "/root/syz-executor.2"[3553] [ 1366.899505][ T3552] attempt to access beyond end of device [ 1366.910084][ T3552] loop5: rw=2049, want=66, limit=60 [ 1366.936132][ T28] audit: type=1804 audit(1599472543.333:901): pid=3552 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1279/file1/bus" dev="loop5" ino=61 res=1 errno=0 [ 1366.942553][ T3552] attempt to access beyond end of device [ 1367.003793][ T3556] IPVS: ftp: loaded support on port[0] = 21 [ 1367.052976][ T3552] loop5: rw=2049, want=68, limit=60 [ 1367.083365][ T3552] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1367.106281][ T3556] lo speed is unknown, defaulting to 1000 [ 1367.134180][ T3552] attempt to access beyond end of device [ 1367.160711][ T3552] loop5: rw=2049, want=70, limit=60 [ 1367.178212][ T3552] Buffer I/O error on dev loop5, logical block 34, lost async page write 09:55:43 executing program 3: unshare(0x64040600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4010744d, &(0x7f0000000040)) 09:55:43 executing program 1: futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0xc02, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdf9) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfffffff0, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"}) 09:55:43 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1367.214642][ T3559] attempt to access beyond end of device [ 1367.221479][ T3559] loop5: rw=0, want=64, limit=60 [ 1367.258609][ T3559] Buffer I/O error on dev loop5, logical block 31, async page read [ 1367.302802][ T3559] attempt to access beyond end of device [ 1367.334413][ T3559] loop5: rw=0, want=66, limit=60 [ 1367.345873][ T3559] Buffer I/O error on dev loop5, logical block 32, async page read [ 1367.366854][ T3559] attempt to access beyond end of device [ 1367.374727][ T3576] IPVS: ftp: loaded support on port[0] = 21 [ 1367.381971][ T3559] loop5: rw=0, want=68, limit=60 09:55:43 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:43 executing program 1: futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) [ 1367.400804][ T3559] Buffer I/O error on dev loop5, logical block 33, async page read [ 1367.453524][ T3559] attempt to access beyond end of device [ 1367.468768][ T3559] loop5: rw=0, want=70, limit=60 [ 1367.481970][ T3559] Buffer I/O error on dev loop5, logical block 34, async page read 09:55:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) ftruncate(r1, 0x0) 09:55:44 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1367.836638][ T3592] attempt to access beyond end of device [ 1367.848637][ T3592] loop5: rw=2049, want=66, limit=60 [ 1367.865042][ T28] audit: type=1804 audit(1599472544.263:902): pid=3592 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1280/file1/bus" dev="loop5" ino=62 res=1 errno=0 [ 1367.868602][ T3592] attempt to access beyond end of device [ 1367.909176][ T3576] lo speed is unknown, defaulting to 1000 [ 1368.020989][ T3592] loop5: rw=2049, want=68, limit=60 [ 1368.045953][ T3592] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1368.073735][ T3592] attempt to access beyond end of device [ 1368.086214][ T3592] loop5: rw=2049, want=70, limit=60 [ 1368.094440][ T3592] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1368.117738][ T3596] attempt to access beyond end of device [ 1368.124202][ T3596] loop5: rw=0, want=64, limit=60 [ 1368.135895][ T3596] Buffer I/O error on dev loop5, logical block 31, async page read [ 1368.153159][ T3596] attempt to access beyond end of device [ 1368.165682][ T3596] loop5: rw=0, want=66, limit=60 [ 1368.175515][ T3596] Buffer I/O error on dev loop5, logical block 32, async page read [ 1368.199123][ T3596] attempt to access beyond end of device [ 1368.208385][ T3596] loop5: rw=0, want=68, limit=60 [ 1368.225840][ T3596] attempt to access beyond end of device [ 1368.238414][ T3596] loop5: rw=0, want=70, limit=60 09:55:44 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) 09:55:44 executing program 1: futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:44 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x9) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) 09:55:44 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1368.530380][T31549] tipc: TX() has been purged, node left! [ 1368.736351][ T28] audit: type=1800 audit(1599472545.133:903): pid=3632 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15812 res=0 errno=0 [ 1368.997598][ T28] audit: type=1800 audit(1599472545.393:904): pid=3635 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15812 res=0 errno=0 09:55:45 executing program 3: r0 = open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0xbb, 0x0, 0x4) 09:55:45 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6900) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) sendfile(r2, r3, 0x0, 0xffffffff) ftruncate(r1, 0x0) 09:55:45 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:45 executing program 1: futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:45 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) 09:55:45 executing program 1: futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) [ 1369.300033][ T28] audit: type=1800 audit(1599472545.703:905): pid=3663 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15940 res=0 errno=0 09:55:45 executing program 0: syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1369.343200][ T3664] attempt to access beyond end of device [ 1369.412334][ T3664] loop5: rw=2049, want=66, limit=60 [ 1369.455945][ T28] audit: type=1804 audit(1599472545.853:906): pid=3670 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1281/file1/bus" dev="loop5" ino=63 res=1 errno=0 09:55:46 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:46 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:46 executing program 0: syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0xf, 0x0, 0x0, {{}, {0x0, 0x4108}}}, 0x1c}}, 0x0) 09:55:46 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) [ 1369.945310][ T3687] attempt to access beyond end of device [ 1369.968287][ T3687] loop5: rw=2049, want=66, limit=60 [ 1369.981473][ T28] audit: type=1804 audit(1599472546.383:907): pid=3687 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1282/file1/bus" dev="loop5" ino=64 res=1 errno=0 [ 1370.004041][ T3687] attempt to access beyond end of device [ 1370.079319][ T3687] loop5: rw=2049, want=68, limit=60 [ 1370.084666][ T3687] attempt to access beyond end of device [ 1370.093650][ T3687] loop5: rw=2049, want=70, limit=60 [ 1370.098978][ T3692] attempt to access beyond end of device [ 1370.104913][ T3692] loop5: rw=0, want=64, limit=60 [ 1370.120239][ T3692] attempt to access beyond end of device [ 1370.125946][ T3692] loop5: rw=0, want=66, limit=60 [ 1370.139413][ T3692] attempt to access beyond end of device [ 1370.145062][ T3692] loop5: rw=0, want=68, limit=60 [ 1370.176418][ T28] audit: type=1800 audit(1599472546.573:908): pid=3694 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15953 res=0 errno=0 [ 1370.223449][ T3692] attempt to access beyond end of device [ 1370.238362][ T3692] loop5: rw=0, want=70, limit=60 09:55:47 executing program 3: r0 = open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0xbb, 0x0, 0x4) 09:55:47 executing program 0: syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:47 executing program 2: r0 = socket(0x10, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, [], 0x3b}}}) 09:55:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:47 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:47 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) 09:55:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1) [ 1370.796366][ T28] audit: type=1800 audit(1599472547.193:909): pid=3711 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16242 res=0 errno=0 [ 1370.819310][ T3713] attempt to access beyond end of device [ 1370.832432][ T3713] loop5: rw=2049, want=66, limit=60 09:55:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) [ 1370.907171][ T3713] attempt to access beyond end of device [ 1370.954174][ T28] audit: type=1804 audit(1599472547.303:910): pid=3720 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1283/file1/bus" dev="loop5" ino=65 res=1 errno=0 [ 1371.010817][ T3713] loop5: rw=2049, want=68, limit=60 [ 1371.048409][ T3713] attempt to access beyond end of device [ 1371.089490][ T3713] loop5: rw=2049, want=70, limit=60 09:55:47 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) pipe(&(0x7f0000000300)) openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0) 09:55:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) [ 1371.129423][ T3720] attempt to access beyond end of device [ 1371.135239][ T3720] loop5: rw=0, want=64, limit=60 [ 1371.163903][ T3720] attempt to access beyond end of device [ 1371.194652][ T3720] loop5: rw=0, want=66, limit=60 [ 1371.217449][ T3720] attempt to access beyond end of device [ 1371.240669][ T3720] loop5: rw=0, want=68, limit=60 [ 1371.273750][ T3720] attempt to access beyond end of device [ 1371.302869][ T3720] loop5: rw=0, want=70, limit=60 09:55:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 09:55:47 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1371.636470][ T3746] attempt to access beyond end of device [ 1371.648263][ T3746] loop5: rw=2049, want=66, limit=60 [ 1371.665011][ T3746] attempt to access beyond end of device [ 1371.677802][ T3746] loop5: rw=2049, want=68, limit=60 [ 1371.690631][ T3746] attempt to access beyond end of device [ 1371.711506][ T3746] loop5: rw=2049, want=70, limit=60 [ 1371.735201][ T3749] attempt to access beyond end of device [ 1371.751323][ T3749] loop5: rw=0, want=64, limit=60 [ 1371.775154][ T3749] attempt to access beyond end of device [ 1371.800571][ T3749] loop5: rw=0, want=66, limit=60 [ 1371.824706][ T3749] attempt to access beyond end of device [ 1371.850891][ T3749] loop5: rw=0, want=68, limit=60 [ 1371.861833][ T3749] attempt to access beyond end of device [ 1371.873303][ T3749] loop5: rw=0, want=70, limit=60 09:55:48 executing program 3: r0 = open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0xbb, 0x0, 0x4) 09:55:48 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) lseek(r1, 0x1000000, 0x3) 09:55:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x0, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:48 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:48 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:48 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x27) 09:55:48 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) lseek(r1, 0x1000000, 0x3) [ 1372.389678][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1372.389691][ T28] audit: type=1800 audit(1599472548.793:912): pid=3762 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16373 res=0 errno=0 09:55:48 executing program 2: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) [ 1372.465914][ T3765] attempt to access beyond end of device 09:55:48 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x0, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1372.512316][ T3765] loop5: rw=2049, want=66, limit=60 [ 1372.526702][ T3772] ptrace attach of "/root/syz-executor.2"[3771] was attempted by "/root/syz-executor.2"[3772] [ 1372.551297][ T28] audit: type=1804 audit(1599472548.953:913): pid=3773 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1285/file1/bus" dev="loop5" ino=67 res=1 errno=0 [ 1372.552245][ T3773] attempt to access beyond end of device [ 1372.638399][ T28] audit: type=1800 audit(1599472549.033:914): pid=3775 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16378 res=0 errno=0 09:55:49 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x0, 0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1372.759341][ T3773] loop5: rw=2049, want=68, limit=60 09:55:49 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) lseek(r1, 0x1000000, 0x3) 09:55:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000fc0)=""/217, 0xd9}, {0x0}, {&(0x7f0000000500)=""/133, 0x85}, {&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000003280)=""/4110, 0x100e}, {0x0}, {&(0x7f0000000900)=""/175, 0xaf}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000000b40)=""/235, 0xeb}, 0xa9}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000c40)=""/219, 0xdb}], 0x1}}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x2000002, 0x7, 0x0, 0xe7}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r4, 0x0, 0x0) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1372.786598][ T3773] buffer_io_error: 20 callbacks suppressed [ 1372.786610][ T3773] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1372.875588][ T3773] attempt to access beyond end of device [ 1372.907060][ T3773] loop5: rw=2049, want=70, limit=60 [ 1372.929534][ T3773] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1372.957424][ T28] audit: type=1800 audit(1599472549.354:915): pid=3791 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16364 res=0 errno=0 [ 1372.997889][ T3765] attempt to access beyond end of device [ 1373.006517][ T3765] loop5: rw=0, want=64, limit=60 [ 1373.039708][ T3765] Buffer I/O error on dev loop5, logical block 31, async page read [ 1373.084846][ T3765] attempt to access beyond end of device [ 1373.111604][ T3765] loop5: rw=0, want=66, limit=60 [ 1373.131672][ T3765] Buffer I/O error on dev loop5, logical block 32, async page read [ 1373.176290][ T3765] attempt to access beyond end of device [ 1373.203256][ T3765] loop5: rw=0, want=68, limit=60 [ 1373.221890][ T3765] Buffer I/O error on dev loop5, logical block 33, async page read [ 1373.247989][ T3765] attempt to access beyond end of device [ 1373.267721][ T3765] loop5: rw=0, want=70, limit=60 [ 1373.285754][ T3765] Buffer I/O error on dev loop5, logical block 34, async page read 09:55:50 executing program 3: r0 = open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0xbb, 0x0, 0x4) 09:55:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) 09:55:50 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) 09:55:50 executing program 1: futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:50 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) 09:55:50 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="1f5583624999c4665398664c3fd64362f39caf1701d25c2fd6d42bce84c2e238b5eae719fd6321452d791cc0576c8624862bd395fea6432d69e5cc27d7b0ca298f52e4be0721915e61ca9791d9da035fcb039c7c6138b7c754ff41c5d3cd1b6eabd323eb69bf5ec29954197b5564e6ac851909cf99421f46b04fff0c935433e6691f8b25bee7df03b08db40ba73ac381dd4dea5dac863b5e2e3300bbd04055fff98a5c92c4b0b0deb44d872aa7bb025d0118d0e12363949f0f52917f95dc079f7c82a8e9eb1c1c840ec3dc93d87be6f6ed2195e8083b0c00ade4a74bd32932f9671a6ec9642e8a4fb6f987dbfeb3ffa2bee7909330daebfb1d", 0xf9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x1f, r0, 0x0, 0x0) 09:55:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt6_stats\x00') read$FUSE(r0, 0x0, 0x0) [ 1374.006969][ T3811] ptrace attach of "/root/syz-executor.2"[3806] was attempted by "/root/syz-executor.2"[3811] 09:55:50 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) 09:55:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1374.072774][ T3808] attempt to access beyond end of device [ 1374.134637][ T3808] loop5: rw=2049, want=66, limit=60 09:55:50 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) [ 1374.168910][ T28] audit: type=1804 audit(1599472550.564:916): pid=3816 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1286/file1/bus" dev="loop5" ino=68 res=1 errno=0 [ 1374.171110][ T3816] attempt to access beyond end of device 09:55:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x38}}, 0x0) 09:55:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1}}, 0x1, 0x9, &(0x7f0000000240)='\t'}) [ 1374.341041][ T3816] loop5: rw=2049, want=68, limit=60 [ 1374.392339][ T3816] Buffer I/O error on dev loop5, logical block 33, lost async page write [ 1374.452160][ T3816] attempt to access beyond end of device [ 1374.472004][ T3816] loop5: rw=2049, want=70, limit=60 [ 1374.510322][ T3816] Buffer I/O error on dev loop5, logical block 34, lost async page write [ 1374.564546][ T3808] attempt to access beyond end of device [ 1374.571079][ T3808] loop5: rw=0, want=64, limit=60 [ 1374.593341][ T3808] Buffer I/O error on dev loop5, logical block 31, async page read [ 1374.658266][ T3808] attempt to access beyond end of device [ 1374.689974][ T3808] loop5: rw=0, want=66, limit=60 [ 1374.713995][ T3808] Buffer I/O error on dev loop5, logical block 32, async page read [ 1374.745206][ T3808] attempt to access beyond end of device [ 1374.767790][ T3808] loop5: rw=0, want=68, limit=60 [ 1374.788655][ T3808] attempt to access beyond end of device [ 1374.829040][ T3808] loop5: rw=0, want=70, limit=60 [ 1374.923713][T31549] tipc: TX() has been purged, node left! 09:55:51 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x8002, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6404}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2908}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 09:55:51 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) 09:55:51 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x1, 0x0, &(0x7f0000000240)='\t'}) 09:55:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) rt_sigqueueinfo(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x10000}) 09:55:51 executing program 1: futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x0) 09:55:51 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) chdir(&(0x7f0000000000)='./file1\x00') fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1375.167106][ T3850] usb usb2: usbfs: process 3850 (syz-executor.0) did not claim interface 0 before use [ 1375.211762][ T3852] attempt to access beyond end of device [ 1375.224316][ T3852] loop5: rw=2049, want=66, limit=60 [ 1375.229889][ T28] audit: type=1800 audit(1599472551.624:917): pid=3851 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16373 res=0 errno=0 [ 1375.294027][ T3861] attempt to access beyond end of device [ 1375.325924][ T3861] loop5: rw=2049, want=68, limit=60 09:55:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x4000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x4000000, 0x0, &(0x7f00008feff0)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x2}]}, 0x20}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000022"], 0x110}}, 0x0) 09:55:51 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) [ 1375.372177][ T3861] attempt to access beyond end of device [ 1375.383753][ T28] audit: type=1804 audit(1599472551.694:918): pid=3861 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir605745736/syzkaller.O1CrQG/1287/file1/bus" dev="loop5" ino=69 res=1 errno=0 [ 1375.411579][ T3861] loop5: rw=2049, want=70, limit=60 [ 1375.430162][ T3852] attempt to access beyond end of device [ 1375.436591][ T3852] loop5: rw=0, want=64, limit=60 09:55:51 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r2, r3, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) [ 1375.460718][ T28] audit: type=1800 audit(1599472551.864:919): pid=3868 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16368 res=0 errno=0 [ 1375.464812][ T3852] attempt to access beyond end of device [ 1375.530126][ T3852] loop5: rw=0, want=66, limit=60 [ 1375.535456][ T3852] attempt to access beyond end of device [ 1375.549138][ T3852] loop5: rw=0, want=68, limit=60 [ 1375.564904][ T3852] attempt to access beyond end of device [ 1375.586393][ T3852] loop5: rw=0, want=70, limit=60 09:55:52 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(0x0) fdatasync(r1) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6900) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) sendfile(r3, r4, 0x0, 0xffffffff) ftruncate(r2, 0x0) [ 1375.637926][ T28] audit: type=1800 audit(1599472552.034:920): pid=3877 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16382 res=0 errno=0 09:55:52 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) close(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) 09:55:52 executing program 2: pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) fallocate(r1, 0x3, 0x1000000, 0xfff000) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000001c0)=ANY=[], 0x72, 0x0) [ 1375.863548][ T28] audit: type=1800 audit(1599472552.264:921): pid=3889 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=15985 res=0 errno=0 09:55:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 09:55:52 executing program 4: r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x80000c) close(0xffffffffffffffff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) lseek(r1, 0x1000000, 0x3) [ 1419.515767][ T2464] Bluetooth: hci2: command 0x0406 tx timeout [ 1537.747275][ T1170] INFO: task syz-executor.0:3850 blocked for more than 143 seconds. [ 1537.755274][ T1170] Not tainted 5.9.0-rc4-syzkaller #0 [ 1537.772992][ T1170] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1537.787135][ T1170] task:syz-executor.0 state:D stack:28744 pid: 3850 ppid: 6850 flags:0x00004004 [ 1537.796438][ T1170] Call Trace: [ 1537.800588][ T1170] __schedule+0xea9/0x2230 [ 1537.805031][ T1170] ? io_schedule_timeout+0x140/0x140 [ 1537.811222][ T1170] schedule+0xd0/0x2a0 [ 1537.815280][ T1170] schedule_timeout+0x1d8/0x250 [ 1537.820904][ T1170] ? usleep_range+0x170/0x170 [ 1537.825574][ T1170] ? lock_downgrade+0x830/0x830 [ 1537.831361][ T1170] ? do_raw_spin_lock+0x120/0x2b0 [ 1537.836392][ T1170] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1537.842319][ T1170] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 1537.848882][ T1170] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1537.854082][ T1170] wait_for_completion_timeout+0x15e/0x270 [ 1537.860853][ T1170] ? find_held_lock+0x2d/0x110 [ 1537.865623][ T1170] ? wait_for_completion_io+0x260/0x260 [ 1537.871996][ T1170] ? usb_submit_urb+0xb56/0x1320 [ 1537.877475][ T1170] ? lockdep_init_map_waits+0x263/0x8a0 [ 1537.883038][ T1170] usb_start_wait_urb+0x144/0x2b0 [ 1537.888782][ T1170] ? usb_api_blocking_completion+0xa0/0xa0 [ 1537.894574][ T1170] ? usb_alloc_urb+0x65/0xb0 [ 1537.899883][ T1170] ? memset+0x20/0x40 [ 1537.903859][ T1170] usb_bulk_msg+0x226/0x550 [ 1537.911086][ T1170] do_proc_bulk+0x39b/0x710 [ 1537.915599][ T1170] ? do_proc_control+0x930/0x930 [ 1537.921922][ T1170] ? __might_fault+0x190/0x1d0 [ 1537.926690][ T1170] usbdev_ioctl+0x586/0x3360 [ 1537.932057][ T1170] ? processcompl_compat+0x670/0x670 [ 1537.937907][ T1170] ? lock_is_held_type+0xbb/0xf0 [ 1537.942859][ T1170] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1537.949477][ T1170] ? do_vfs_ioctl+0x27d/0x1090 [ 1537.954245][ T1170] ? generic_block_fiemap+0x60/0x60 [ 1537.960342][ T1170] ? selinux_inode_getsecctx+0x90/0x90 [ 1537.965782][ T1170] ? _copy_to_user+0x126/0x160 [ 1537.971584][ T1170] ? __fget_files+0x294/0x400 [ 1537.976262][ T1170] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1537.981893][ T1170] ? processcompl_compat+0x670/0x670 [ 1537.987772][ T1170] __x64_sys_ioctl+0x193/0x200 [ 1537.992547][ T1170] do_syscall_64+0x2d/0x70 [ 1537.997934][ T1170] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1538.003834][ T1170] RIP: 0033:0x45d5b9 [ 1538.008466][ T1170] Code: Bad RIP value. [ 1538.012518][ T1170] RSP: 002b:00007f564fcb9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1538.022330][ T1170] RAX: ffffffffffffffda RBX: 000000000001a9c0 RCX: 000000000045d5b9 [ 1538.030972][ T1170] RDX: 0000000020000080 RSI: 00000000c0185502 RDI: 0000000000000003 [ 1538.039495][ T1170] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1538.049232][ T1170] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1538.057758][ T1170] R13: 00007fff1d847b5f R14: 00007f564fcba9c0 R15: 000000000118cf4c [ 1538.065756][ T1170] [ 1538.065756][ T1170] Showing all locks held in the system: [ 1538.074611][ T1170] 1 lock held by khungtaskd/1170: [ 1538.080188][ T1170] #0: ffffffff89bd6a40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1538.091503][ T1170] 1 lock held by in:imklog/6520: [ 1538.096433][ T1170] #0: ffff88809238c3f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1538.106341][ T1170] [ 1538.110077][ T1170] ============================================= [ 1538.110077][ T1170] [ 1538.119050][ T1170] NMI backtrace for cpu 1 [ 1538.123398][ T1170] CPU: 1 PID: 1170 Comm: khungtaskd Not tainted 5.9.0-rc4-syzkaller #0 [ 1538.131735][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1538.141760][ T1170] Call Trace: [ 1538.145028][ T1170] dump_stack+0x198/0x1fd [ 1538.149347][ T1170] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1538.154536][ T1170] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1538.160153][ T1170] nmi_trigger_cpumask_backtrace+0x1b3/0x223 [ 1538.166133][ T1170] watchdog+0xd7d/0x1000 [ 1538.170356][ T1170] ? reset_hung_task_detector+0x30/0x30 [ 1538.175881][ T1170] kthread+0x3b5/0x4a0 [ 1538.179923][ T1170] ? __kthread_bind_mask+0xc0/0xc0 [ 1538.185010][ T1170] ret_from_fork+0x1f/0x30 [ 1538.189704][ T1170] Sending NMI from CPU 1 to CPUs 0: [ 1538.195486][ C0] NMI backtrace for cpu 0 [ 1538.195492][ C0] CPU: 0 PID: 3896 Comm: systemd-journal Not tainted 5.9.0-rc4-syzkaller #0 [ 1538.195499][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1538.195503][ C0] RIP: 0010:preempt_count_sub+0x5f/0x150 [ 1538.195514][ C0] Code: 47 0b 85 c9 75 1b 65 8b 05 fe 48 b2 7e 89 c2 81 e2 ff ff ff 7f 39 da 7c 13 81 fb fe 00 00 00 76 63 f7 db 65 01 1d e1 48 b2 7e <5b> c3 e8 ca d3 a4 06 85 c0 74 f5 48 c7 c0 f8 9d b2 8a 48 ba 00 00 [ 1538.195518][ C0] RSP: 0018:ffffc900027278b0 EFLAGS: 00000297 [ 1538.195526][ C0] RAX: 0000000080000001 RBX: 00000000ffffffff RCX: 0000000000000000 [ 1538.195531][ C0] RDX: 0000000000000001 RSI: ffffc90002727e68 RDI: 0000000000000001 [ 1538.195537][ C0] RBP: ffffc90002727e98 R08: ffffffff8b27c174 R09: 0000000000000001 [ 1538.195542][ C0] R10: 000000000007201e R11: 0000000000000001 R12: ffffc90002720000 [ 1538.195548][ C0] R13: ffffc900027279cd R14: ffffc900027279e8 R15: ffffc90002727998 [ 1538.195553][ C0] FS: 00007f3b9b03c8c0(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1538.195558][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1538.195563][ C0] CR2: 00007f3b98742000 CR3: 00000000921ff000 CR4: 00000000001506f0 [ 1538.195568][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1538.195573][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1538.195576][ C0] Call Trace: [ 1538.195580][ C0] unwind_next_frame+0xe3b/0x1f90 [ 1538.195583][ C0] ? do_sys_openat2+0xf5/0x420 [ 1538.195586][ C0] ? lock_downgrade+0x830/0x830 [ 1538.195590][ C0] ? deref_stack_reg+0x150/0x150 [ 1538.195593][ C0] ? __unwind_start+0x517/0x800 [ 1538.195597][ C0] ? profile_setup.cold+0xc1/0xc1 [ 1538.195600][ C0] arch_stack_walk+0x81/0xf0 [ 1538.195604][ C0] ? __x64_sys_open+0x119/0x1c0 [ 1538.195607][ C0] stack_trace_save+0x8c/0xc0 [ 1538.195611][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1538.195615][ C0] kasan_save_stack+0x1b/0x40 [ 1538.195618][ C0] ? kasan_save_stack+0x1b/0x40 [ 1538.195622][ C0] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1538.195626][ C0] ? kmem_cache_alloc+0x13a/0x3a0 [ 1538.195630][ C0] ? getname_flags.part.0+0x50/0x4f0 [ 1538.195633][ C0] ? getname+0x8e/0xd0 [ 1538.195636][ C0] ? do_sys_openat2+0xf5/0x420 [ 1538.195640][ C0] ? __zone_watermark_ok+0x3f0/0x3f0 [ 1538.195643][ C0] ? lock_acquire+0x1f3/0xae0 [ 1538.195647][ C0] ? cache_grow_end+0x46/0x170 [ 1538.195650][ C0] ? lock_is_held_type+0xbb/0xf0 [ 1538.195654][ C0] ? find_held_lock+0x2d/0x110 [ 1538.195657][ C0] ? cache_alloc_refill+0x2fd/0x340 [ 1538.195661][ C0] ? lock_downgrade+0x830/0x830 [ 1538.195665][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 1538.195669][ C0] ? kasan_unpoison_shadow+0x33/0x40 [ 1538.195673][ C0] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1538.195676][ C0] kmem_cache_alloc+0x13a/0x3a0 [ 1538.195680][ C0] getname_flags.part.0+0x50/0x4f0 [ 1538.195684][ C0] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1538.195687][ C0] getname+0x8e/0xd0 [ 1538.195690][ C0] do_sys_openat2+0xf5/0x420 [ 1538.195694][ C0] ? seccomp_notify_ioctl+0xd90/0xd90 [ 1538.195698][ C0] ? strncpy_from_user+0x2bf/0x3e0 [ 1538.195701][ C0] ? build_open_flags+0x650/0x650 [ 1538.195705][ C0] ? getname_flags.part.0+0x1dd/0x4f0 [ 1538.195708][ C0] __x64_sys_open+0x119/0x1c0 [ 1538.195711][ C0] ? do_sys_open+0x140/0x140 [ 1538.195715][ C0] ? lock_is_held_type+0xbb/0xf0 [ 1538.195719][ C0] ? __secure_computing+0x104/0x360 [ 1538.195722][ C0] do_syscall_64+0x2d/0x70 [ 1538.195726][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1538.195729][ C0] RIP: 0033:0x7f3b9a5cc840 [ 1538.195741][ C0] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24 [ 1538.195744][ C0] RSP: 002b:00007ffcba13d018 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1538.195753][ C0] RAX: ffffffffffffffda RBX: 00007ffcba13d320 RCX: 00007f3b9a5cc840 [ 1538.195758][ C0] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055a4cfdba5c0 [ 1538.195763][ C0] RBP: 000000000000000d R08: 000000000000c0ff R09: 00000000ffffffff [ 1538.195769][ C0] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1538.195774][ C0] R13: 000055a4cfdae060 R14: 00007ffcba13d2e0 R15: 000055a4cfdba610 [ 1538.196957][ T1170] Kernel panic - not syncing: hung_task: blocked tasks [ 1538.620100][ T1170] CPU: 1 PID: 1170 Comm: khungtaskd Not tainted 5.9.0-rc4-syzkaller #0 [ 1538.628308][ T1170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1538.638424][ T1170] Call Trace: [ 1538.641696][ T1170] dump_stack+0x198/0x1fd [ 1538.646003][ T1170] panic+0x347/0x7c0 [ 1538.649873][ T1170] ? __warn_printk+0xf3/0xf3 [ 1538.654451][ T1170] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1538.660055][ T1170] ? preempt_schedule_thunk+0x16/0x18 [ 1538.665400][ T1170] ? watchdog.cold+0x5/0x16b [ 1538.669966][ T1170] ? watchdog+0xa82/0x1000 [ 1538.674360][ T1170] watchdog.cold+0x16/0x16b [ 1538.678839][ T1170] ? reset_hung_task_detector+0x30/0x30 [ 1538.684362][ T1170] kthread+0x3b5/0x4a0 [ 1538.688405][ T1170] ? __kthread_bind_mask+0xc0/0xc0 [ 1538.693490][ T1170] ret_from_fork+0x1f/0x30 [ 1538.699419][ T1170] Kernel Offset: disabled [ 1538.703741][ T1170] Rebooting in 86400 seconds..