0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000240)={0x8000, 0x6, 0x1}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1409, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) 12:16:38 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x1000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xc00) 12:16:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xe00) 12:16:38 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x2000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2224.036170][ T26] audit: type=1804 audit(1596888998.675:1335): pid=21697 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2650/cgroup.controllers" dev="sda1" ino=16275 res=1 errno=0 12:16:38 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c49b66204ef00b7a16b98d4ea3ea5008000", @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r3, 0x221}, 0x14}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000829bd7000fedbdf250c00000011000700eb29ff7fa01e0353a819cddc74000000"], 0x28}, 0x1, 0x0, 0x0, 0x24048020}, 0x20004801) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4], 0x2c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyS3\x00', 0x4c0002, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [""]}, 0x14}}, 0x40) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000180)={r9, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000000)={r9, 0x8}, &(0x7f0000000040)=0x8) 12:16:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xf00) 12:16:38 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x3000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:39 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r1 = dup3(0xffffffffffffffff, r0, 0x80000) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000b35) [ 2224.501188][ T26] audit: type=1804 audit(1596888999.145:1336): pid=21709 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir626235253/syzkaller.8UmjPK/2995/file0" dev="sda1" ino=16369 res=1 errno=0 [ 2224.694788][ T26] audit: type=1804 audit(1596888999.235:1337): pid=21709 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir626235253/syzkaller.8UmjPK/2995/file0" dev="sda1" ino=16369 res=1 errno=0 12:16:39 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x4000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:39 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xfa8) 12:16:39 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) 12:16:39 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r0, r0, 0x0, r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 12:16:39 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffffffff, 0x9, &(0x7f0000000740)=[{&(0x7f0000000080)="f2610014b6a8ef26bcb95326bcc231cf9f0b8c9e18246907d514610dd8a5e0bc83855e290cb5b35ca274aba5aad2ecc5b68b14ee7a3d915b6bfff11ae644bc1f2b734cfdc1bc9b4f9253e99ae5735585ed8f4f0019ee4c4fbd49f3bb80553ad4d91d92f8e8e9fc422b89a02959548be5f86170749b303adf9c1cd6461e93a7eb44bde9499c20214a2b6d1c0dad38d8c2b4a3211322f7ba1a82cc310abf65dfeada1d0f6f5bd52f7011cfa2afae11ff59dad68e754c9096762e", 0xb9, 0x80000000}, {&(0x7f0000000140)="b31eac59e5662b85602f9db636982fe08fd439fd17f35056540f78a907d7a41fb009fa0038de9deca05e71fa94b12bcf0cf0037a17c8b981ef34d979a83f39e422131b8d58b5e08c5f3fc5cccc5f9eb277380488cfd8f4f4c1f89a10bed78412b10da91989b0eda390fd4187af00ed0de4d4143cd2c85697b72407f84a9ba18dee26746acde5f63bfb7ac82cfd2c0935a15ffaa19fb1aa785b7aba36bd63709a18f4d93733ce3842c6328025c9087b662c86cdc837410f5eccd193e6e3e7fa336e54ef9bcc2764931bcddf1a9040cb6a97042c9e4567cacba3a2cf7b2ea493e3", 0xe0, 0x3}, {&(0x7f0000000240)="c813e3befa94d97934a1aead7ca0233524ef301895b6cb5828ac51586adc5d72f26ed308d5a2aafd482def45d7b86c2c4f829fd0e42d54fa3cd32f43a5246560739ae519f28352fe34a2ecb2e4d79f721ae03dff8a6c377fe30c0783d6ea3adc26d3e9c838724d2287ecdd80254f64d45abfe88bf8b422dfdd7818e9acf760258100ef57405fa75b87166734d99950244cae92fb60dcde7b22db0369420d1e601c1c78e2c8c393c924c0825b2cd41a3c4d66779952e6f08d094a5708e9c75b6afd9e183deb055c6efc393019433f08e299509fd860e14d8ed9", 0xd9, 0x3}, {&(0x7f0000000340)="ba0477a37fac9a720f21e89280f7382756ae01119b39bbb4176858c1c7eed8bab366881625001b33e2e42dfd0e82d381cc849338f8cf6df60b2d8a98a9bfccacd64d4884a47bae2dc89d48819249787a48388c67afc1e767e792ca0f6621e3d9495d30d7a9a7e2f71c4ff626fdc0a731917d5a4bf8dd5e700ea3fdc1e254e96f14c98e4ffee4460d0e5958971a4d19740027ce6abf04022ed5a59936668c7ae9358a5c9ec191e4026fb1b116019f48b77a9179985e", 0xb5, 0x1}, {&(0x7f0000000400)="6cb7363cc5aa1f8c901107ae8813de7e810bc79f4f50f5f28a08fd77ec38dc0fb4e1b5a69b8d2b4366b284a305414ee0d7c1bc502bf63928fbc3896f200ae349a3f32cac739791278761cf5b73aea5740e497b726cdf0c6fee1b4d27603595535f65ee7423d176", 0x67, 0x3549}, {&(0x7f0000000480)="9851152e20bfd38870b64cd6be6530ddbb1548ff04b902014ad42392fb52cfebce2b79a7e12f678b75e19b1d8ce34dbaae0c951517a7f7f08c51feebbf6855ceecaf7ceb2dab054e3bc60a2a12293c36996f45743c54dfd1569311bc517a62058a0e5e44e12305ca3c6fb95fb1c27378bf0be2d32fa40c6902", 0x79, 0x9}, {&(0x7f0000000500)="b9ca6cd45a41cc158c21d69ef5563a66ffbb525faa6b1cb116386af843f53f0c2a501c03a9a9f9c791ebba8f96b468bce8ed7339192e64d82a8464c9b9025e18b60f66841824f88892621b1e2bfad838e73e511b4d7988a31f1085873ebce3f318785a0592f20465ddf2367717e7822caa978ee5c1d43381e471e8e391c1287aa23bda9a6ac91400564d3cac804bc1bce396f02e6b0cc42ff66df07cf001a438bf5466e7d7649b509024645bce7c77a9a0882ff04b60db01fe840384b00cda86e205ba9727b3e1b3a4a4b956ad87562d889f", 0xd2, 0x1}, {&(0x7f0000000600)="1daa382721ab0fb866f3d8ad35244cc862c19c54fa392eb2605ba7c8859eb4f8050c01e0440cecf207446f3bdf65f3d0e9dd25d45292d2ac02279cab04e9ae0da871ccc5f316e1989039acaaa3487b2124dc68ba254a287b3e19ab52a88d3fd4a0441227b1028230e81542a3d8326706002afd001f8ed901eb99c223dab6dd8b0113", 0x82}, {&(0x7f00000006c0)="d0cab4ac918c6a2aa197efaa741930de23799222040b13650515f599f34accfae884d84cdc31f9d1aac4f345a3dd203ec806ded17b99a35b8e8b8d570d7e0d0f8c295666cf4d9e1677d3c693f5d1e433ecf80e5ec66aac03d209d0dcc6f21b0d673c", 0x62, 0x61}]) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000840)={0x3, &(0x7f0000000000)=[{0x7, 0xff, 0x1, 0x101}, {0x0, 0x3f, 0x6, 0x5}, {0x5, 0x80, 0x80, 0x1ff}]}) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) close_range(r2, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) [ 2225.381161][ T26] audit: type=1804 audit(1596889000.025:1338): pid=21744 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2652/cgroup.controllers" dev="sda1" ino=16288 res=1 errno=0 12:16:40 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x1ea1) 12:16:40 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x5000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:40 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="2e292f2277c42c863d2c625699c7634d870d8b644331c1325f53838f73d32930cb749c9f1eee8e4c6b2a90e575d6c8f422739a2bc7451c0412e51129260275e18c64d8cc8d0ce1e8bc32ded9eed85761254da8594048bad936aa6ad3ab769d5cb64667f5457cf722399fcf2055b47460d06e16b33609cdec296fa44597ea0fb2718be8156a748d63fb25036feaab62641347191a59223c40", @ANYRES16=r1], 0x2c}}, 0x0) 12:16:40 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x8000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:40 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x2000) 12:16:40 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x9000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:40 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x3000) 12:16:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x100) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'caif0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}}) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) r4 = open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68000000021404002dbd7000fbdbdf250900020073797a320000000005005400010000000900020073797a310000000008004400", @ANYRES32=r4, @ANYBLOB="050054000100000000000000", @ANYRES32=r0, @ANYBLOB="0500540000000000050054000000000005005400010000000500540001000000"], 0x68}, 0x1, 0x0, 0x0, 0x48810}, 0x20000001) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self\x00', 0x1000, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x24}}, 0x4004001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000340)={0xa4e9}) sendfile(r5, r1, 0x0, 0x100000b35) ioctl$NBD_DISCONNECT(r3, 0xab08) 12:16:40 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRES64=r2], 0x2c}}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000003ef1cb0000000000551c6e386751e8e4e6acb64f", @ANYRES32]) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f0000000100)={{0x2, @addr=0x1}, 0x8, 0xf65, 0x3}) 12:16:40 executing program 4: syz_mount_image$msdos(0x0, &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:40 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0xe000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2226.210681][ T26] audit: type=1804 audit(1596889000.855:1339): pid=21778 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2653/cgroup.controllers" dev="sda1" ino=16290 res=1 errno=0 [ 2226.340984][ T26] audit: type=1804 audit(1596889000.925:1340): pid=21778 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2653/file0" dev="sda1" ino=16269 res=1 errno=0 [ 2226.409602][ T26] audit: type=1804 audit(1596889000.935:1341): pid=21787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir626235253/syzkaller.8UmjPK/2998/file0" dev="sda1" ino=16271 res=1 errno=0 [ 2226.539724][ T26] audit: type=1804 audit(1596889000.985:1342): pid=21787 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir626235253/syzkaller.8UmjPK/2998/file0" dev="sda1" ino=16271 res=1 errno=0 12:16:42 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0xf000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x3f00) 12:16:42 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="009863eceff5", @ANYRES16=r1], 0x2c}}, 0x0) 12:16:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000140)={0x4, 0x800, 0x1}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000b35) 12:16:42 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x9) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') close(0xffffffffffffffff) mmap(&(0x7f000062b000/0x1000)=nil, 0x1000, 0xfffffffffeffffff, 0x110, r1, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000a42000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r2, 0x7261000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:16:42 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x3f000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x4000) 12:16:42 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffcfffff5, 0x30, 0xffffffffffffffff, 0x7f2d0000) socket(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) [ 2227.709912][ T26] audit: type=1804 audit(1596889002.355:1343): pid=21832 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2654/cgroup.controllers" dev="sda1" ino=16280 res=1 errno=0 12:16:42 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYRESDEC], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="d7bee8fea801d1e70035f9f08d23835d413a980abcb6deac27351b310f08012dd8806d71502c82a31416720d334319245dd705be01753ae1832faa1ef467120a5b11e36ffcf279613dbfac7b8132b4116c36e55350f87c5542bb3005f5f6136af1fe2887c5b2d527959c064f8c1371161de42759ff24c608164d9a7b9e676151ecdf7b3326685494772092079053632ea53d384b01c8482decbc2cedde16ac65b4", @ANYRES16=r1], 0x2c}}, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) 12:16:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x4800) 12:16:42 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x5f1f0000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:42 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x60000000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x4c00) 12:16:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', 0x0, 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2228.283818][ T26] audit: type=1804 audit(1596889002.926:1344): pid=21814 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2654/cgroup.controllers" dev="sda1" ino=16280 res=1 errno=0 12:16:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x1, 0xc, 0x8, 0x0, 0x1, 0x20000000, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x7) 12:16:43 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) 12:16:43 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x9effffff, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:43 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x5865) 12:16:43 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x810, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:16:43 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x6000) 12:16:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:43 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0xc00e0000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:43 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000005000000000000000000"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}}, 0x0) 12:16:43 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x6558) 12:16:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24798c2a39cc65ff6cae95a1807e00000000000000000000000000000000000000f26f11a5ce4dbee4d2baab0a3249a233040ca9608e3e51fc2a75d1"], 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2228.810369][T21892] FAT-fs (loop4): bogus number of reserved sectors [ 2228.826322][T21892] FAT-fs (loop4): Can't find a valid FAT filesystem 12:16:43 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0xf0ffffff, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:43 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0xfffff000, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:43 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x6800) 12:16:43 executing program 5: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) openat2(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2400, 0x100, 0xa}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x58, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYRES64=r3, @ANYRESHEX=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000080)={0x0, 0x59, 0x3}) [ 2229.073941][ T26] audit: type=1804 audit(1596889003.716:1345): pid=21910 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2656/cgroup.controllers" dev="sda1" ino=16281 res=1 errno=0 12:16:43 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x6c00) [ 2229.376367][ T26] audit: type=1804 audit(1596889004.016:1346): pid=21925 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir626235253/syzkaller.8UmjPK/3003/file0" dev="sda1" ino=15818 res=1 errno=0 [ 2229.489750][ T26] audit: type=1804 audit(1596889004.066:1347): pid=21922 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir626235253/syzkaller.8UmjPK/3003/file0" dev="sda1" ino=15818 res=1 errno=0 12:16:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e28c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000208000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x101801, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000b35) 12:16:44 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0xffffff7f, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:44 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x7400) 12:16:44 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000004600)=""/200, 0x26, 0xc8, 0x8}, 0x20) 12:16:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:44 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0xffffff9e, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2229.801586][T21941] BPF:[1] ARRAY (anon) [ 2229.818366][T21942] BPF:[1] ARRAY (anon) 12:16:44 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x7a00) [ 2229.847831][T21941] BPF: [ 2229.882518][T21942] BPF: [ 2229.894466][T21941] BPF:meta_left:0 meta_needed:12 [ 2229.911306][T21942] BPF:meta_left:0 meta_needed:12 [ 2229.936385][T21941] BPF: [ 2229.936385][T21941] 12:16:44 executing program 5: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, 0x0) [ 2229.970261][T21948] FAT-fs (loop4): bogus number of reserved sectors [ 2229.991677][T21942] BPF: [ 2229.991677][T21942] [ 2230.062690][T21948] FAT-fs (loop4): Can't find a valid FAT filesystem 12:16:44 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0xfffffff0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:44 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x8100) 12:16:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xa11e) 12:16:45 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0xffffffff, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2230.464725][T21972] FAT-fs (loop4): bogus number of reserved sectors [ 2230.534235][T21972] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2230.566586][ T2580] usb 6-1: new high-speed USB device number 22 using dummy_hcd 12:16:45 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xa80f) 12:16:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:45 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2230.806572][ T2580] usb 6-1: Using ep0 maxpacket: 16 12:16:45 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) connect$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x7fffffff, @loopback, 0x692d}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0xc7) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) getsockname$unix(r3, &(0x7f0000000180), &(0x7f0000000200)=0x6e) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2406000007065deb00f486015af810de4b00000008000640ff10fffffd0200010007fb"], 0x24}}, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000240)={0x59, 0x1, 0x40b, 0x3f}) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000140)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000b35) 12:16:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xf000) [ 2230.930158][T21992] FAT-fs (loop4): bogus number of reserved sectors [ 2230.967267][ T2580] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2230.980839][T21992] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2230.994587][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 2230.994600][ T26] audit: type=1804 audit(1596889005.636:1349): pid=21994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2658/file0" dev="sda1" ino=16369 res=1 errno=0 [ 2231.026092][ T26] audit: type=1804 audit(1596889005.656:1350): pid=21994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2658/file0" dev="sda1" ino=16369 res=1 errno=0 [ 2231.054917][ T26] audit: type=1804 audit(1596889005.706:1351): pid=21997 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2658/file0" dev="sda1" ino=16369 res=1 errno=0 [ 2231.079218][ T2580] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2231.079235][ T2580] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2231.079252][ T2580] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2231.184590][ T26] audit: type=1804 audit(1596889005.706:1352): pid=21994 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2658/file0" dev="sda1" ino=16369 res=1 errno=0 [ 2231.185706][ T26] audit: type=1804 audit(1596889005.726:1353): pid=21998 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2658/file0" dev="sda1" ino=16369 res=1 errno=0 [ 2231.247237][ T2580] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2231.247294][ T2580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.247309][ T2580] usb 6-1: Product: syz [ 2231.247325][ T2580] usb 6-1: Manufacturer: syz [ 2231.247340][ T2580] usb 6-1: SerialNumber: syz [ 2231.766635][ T2580] usb 6-1: 0:2 : does not exist [ 2231.802040][ T2580] usb 6-1: USB disconnect, device number 22 [ 2232.506453][ T2580] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2232.756464][ T2580] usb 6-1: Using ep0 maxpacket: 16 [ 2232.917173][ T2580] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2232.997151][ T2580] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2233.011525][ T2580] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2233.045869][ T2580] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2233.296427][ T2580] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2233.305511][ T2580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:16:48 executing program 5: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, 0x0) 12:16:48 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:48 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x34000) 12:16:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x1, 0x9, 0x5, 0x0, 0x0, {0xb, 0x0, 0x9}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x40008c0) 12:16:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2233.346278][ T2580] usb 6-1: Product: syz [ 2233.350481][ T2580] usb 6-1: Manufacturer: syz [ 2233.398015][ T2580] usb 6-1: can't set config #1, error -71 [ 2233.405188][ T2580] usb 6-1: USB disconnect, device number 23 12:16:48 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c00e0000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2233.475688][T22033] FAT-fs (loop4): bogus number of reserved sectors [ 2233.492598][T22033] FAT-fs (loop4): Can't find a valid FAT filesystem 12:16:48 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x300000) [ 2233.587023][ T26] audit: type=1804 audit(1596889008.226:1354): pid=22040 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2659/cgroup.controllers" dev="sda1" ino=16278 res=1 errno=0 12:16:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:48 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x400300) 12:16:48 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e03f0300", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2233.916245][ T2580] usb 6-1: new high-speed USB device number 24 using dummy_hcd 12:16:48 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xf0ffff) [ 2234.000810][T22054] FAT-fs (loop4): bogus number of reserved sectors [ 2234.036980][T22054] FAT-fs (loop4): Can't find a valid FAT filesystem 12:16:48 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec040020", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2234.166503][ T2580] usb 6-1: Using ep0 maxpacket: 16 [ 2234.336866][ T2580] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2234.436508][ T2580] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2234.445232][ T2580] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2234.485954][ T2580] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2234.678009][ T2580] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2234.695606][ T2580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.720449][ T2580] usb 6-1: Product: syz [ 2234.736377][ T2580] usb 6-1: Manufacturer: syz [ 2234.746555][ T2580] usb 6-1: SerialNumber: syz [ 2235.316351][ T2580] usb 6-1: 0:2 : does not exist [ 2235.343322][ T2580] usb 6-1: USB disconnect, device number 24 12:16:50 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10004, 0x0) 12:16:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) mq_timedreceive(r1, &(0x7f00000000c0)=""/32, 0x20, 0x6, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 12:16:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:50 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x1000000) 12:16:50 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00f0ff7f", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2236.067960][T22095] FAT-fs (loop4): bogus number of reserved sectors [ 2236.093971][T22095] FAT-fs (loop4): Can't find a valid FAT filesystem 12:16:50 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x2000000) [ 2236.128735][ T26] audit: type=1804 audit(1596889010.776:1355): pid=22093 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2660/cgroup.controllers" dev="sda1" ino=16288 res=1 errno=0 12:16:50 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="effdffff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:51 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:51 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c030000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x3000000) [ 2236.595220][T22117] FAT-fs (loop4): bogus number of reserved sectors [ 2236.667567][T22117] FAT-fs (loop4): Can't find a valid FAT filesystem 12:16:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x4000000) 12:16:51 executing program 5: r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x11, &(0x7f0000000140)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc}]}}) syz_usb_control_io$uac1(r0, &(0x7f0000000340)={0x14, &(0x7f00000002c0)={0x0, 0xf, 0x2, {0x2, 0x23}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x20, 0x16, 0xbe, "01245b15bc95545a62b0f3c940b5466c7c0b89ee6e6c07f95eea0225753136f90d4d4c6d50cd0b0806093471959be9f7d90793d1162826e597dd0e71306a91866bf3d70732d8af95e3b16b5351b62bf331fd9ff092a35b0962e4d6d9fec2a646148095ce6d4fe4863d26628322bbe87faaea9cff03c29020cb7be13cee90976380a6cbc122145469f4c8562d1d033af786dab3d5b02c735cd64664acf465f292cf361d1c8d86d01904621523e2f9f583b61c608f57b40145f96f820badfd"}, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x81, 0x3, "ff6b60"}, &(0x7f0000000580)={0x20, 0x82, 0x1, 'u'}, &(0x7f00000005c0)={0x20, 0x83, 0x2, "f53a"}, &(0x7f0000000600)={0x20, 0x84, 0x3, "725ba5"}, &(0x7f0000000640)={0x20, 0x85, 0x3, '\fEI'}}) 12:16:51 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x5b, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 12:16:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x5000000) 12:16:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:52 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c050000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2237.406918][ T26] audit: type=1804 audit(1596889012.056:1356): pid=22143 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2661/cgroup.controllers" dev="sda1" ino=16290 res=1 errno=0 12:16:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x6000000) [ 2237.543389][T22149] FAT-fs (loop4): bogus number of reserved sectors [ 2237.550082][T22149] FAT-fs (loop4): Can't find a valid FAT filesystem 12:16:52 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\b\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x7000000) [ 2237.786058][ T595] usb 6-1: new high-speed USB device number 25 using dummy_hcd 12:16:52 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\t\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x8000000) [ 2237.968912][T22168] FAT-fs (loop4): bogus number of reserved sectors [ 2238.008218][T22168] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2238.046370][ T595] usb 6-1: Using ep0 maxpacket: 16 [ 2238.111815][ T26] audit: type=1804 audit(1596889012.756:1357): pid=22143 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2661/cgroup.controllers" dev="sda1" ino=16290 res=1 errno=0 [ 2238.296636][ T595] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2238.309285][ T595] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2238.365061][ T595] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2238.546556][ T595] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2238.565819][ T595] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.573898][ T595] usb 6-1: Product: syz [ 2238.580862][ T595] usb 6-1: Manufacturer: syz [ 2238.585480][ T595] usb 6-1: SerialNumber: syz [ 2239.086049][ T595] usb 6-1: 0:2 : does not exist [ 2239.112960][ T595] usb 6-1: USB disconnect, device number 25 [ 2239.835801][T32427] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2240.085683][T32427] usb 6-1: Using ep0 maxpacket: 16 [ 2240.306420][T32427] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2240.318805][T32427] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2240.334288][T32427] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 12:16:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:16:55 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x9000000) 12:16:55 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0e0000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd050001000790b80d9c497ca77d826c2fe6012449403d26578bc7d3109ef8c43adcb0000078037144e720c27445f70b3489c4e5554e639cef2f2c2f3900"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRESDEC=0x0]) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='cgroup.controllers\x00', &(0x7f00000005c0)='./file0\x00', r1) fanotify_mark(r3, 0x8, 0x1, r4, &(0x7f0000000240)='./file0\x00') ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/41, 0x29}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/16, 0x10}, {&(0x7f0000000440)=""/35, 0x23}, {&(0x7f0000000500)=""/148, 0x94}, {&(0x7f0000000480)=""/37, 0x25}, {&(0x7f00000005c0)}, {&(0x7f0000000800)=""/4096, 0x1000}], 0xa) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000010101edff00000000000000050000050c00186b4f28ec5d57e5e21ec33580080002407fffffff0800d2f89b4eaa19"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r5 = pkey_alloc(0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000006c0)={0x1, 'syzkaller0\x00', {}, 0xffff}) pkey_free(r5) pkey_mprotect(&(0x7f0000505000/0x4000)=nil, 0x4000, 0x1000000, r5) sendfile(r2, r1, 0x0, 0x100000b35) 12:16:55 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x30, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0xfb9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=r2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) [ 2240.535729][T32427] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2240.570437][T32427] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 12:16:55 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0f0000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2240.593398][T22207] FAT-fs (loop4): bogus number of reserved sectors [ 2240.610636][T22207] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2240.623583][T32427] usb 6-1: Product: syz 12:16:55 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xa000000) [ 2240.683682][ T26] audit: type=1804 audit(1596889015.327:1358): pid=22206 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2662/file0" dev="sda1" ino=16278 res=1 errno=0 [ 2240.684398][T32427] usb 6-1: Manufacturer: syz [ 2240.718991][T22218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:16:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r2 = creat(&(0x7f0000000140)='./file1\x00', 0x4e) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='io.stat\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000b35) [ 2240.808151][T22218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:16:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{0x0}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2240.858420][T22218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2240.876398][T32427] usb 6-1: can't set config #1, error -71 [ 2240.882641][T22220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2240.940583][T32427] usb 6-1: USB disconnect, device number 26 12:16:55 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',`\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:55 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xc000000) [ 2241.008539][T22220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2241.069310][T22218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2241.133802][T22238] FAT-fs (loop4): bogus number of reserved sectors [ 2241.137956][T22218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2241.149316][T22218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2241.160557][T22220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:16:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:16:55 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2cf00000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2241.177850][T22238] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2241.198738][T22220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:16:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:16:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x4004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 12:16:56 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xe000000) [ 2241.519632][ T26] audit: type=1804 audit(1596889016.167:1359): pid=22262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2664/cgroup.controllers" dev="sda1" ino=16349 res=1 errno=0 12:16:56 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000000)={@null, @default}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:16:56 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000300", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:56 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xf000000) 12:16:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2242.130785][T22276] FAT-fs (loop4): bogus number of reserved sectors [ 2242.181256][T22276] FAT-fs (loop4): Can't find a valid FAT filesystem 12:16:56 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000500", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:56 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x10000000) [ 2242.265583][ T26] audit: type=1804 audit(1596889016.907:1360): pid=22265 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2664/cgroup.controllers" dev="sda1" ino=16349 res=1 errno=0 12:16:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:16:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = gettid() tkill(r1, 0x17) ptrace$setregs(0xffffffffffffffff, r1, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESDEC=r3, @ANYBLOB="ffaa12d690826116eb9f3d91271bcd00940374db56ccd573f13e5779134d00f2ae64e734f63d02190512243127a430168f66280ddaa6011e0112be14551f701961e1065791eb68fe53526e1c92ca497dbd46fecbb5a39e41ceb9b1f5d2799792fa2cc816f539f8ce925855002c8dfb5cf504ac369a4e305327745d0b0e5cca39e3987dce5d28ec00dde7b31b224c1921b7c264ebd78e4a4b9bd4fefb8c1e5bc34abdc981bc7d50cd1616b823685e1d5d5f9611484a9e78d34442e1a0589746e440", @ANYRES16=r3, @ANYRESHEX=r2, @ANYRESHEX=r3], 0x208e24b) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000b35) 12:16:57 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\t\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:57 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x20000000) [ 2242.626742][T22301] FAT-fs (loop4): bogus number of reserved sectors [ 2242.633566][T22301] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2242.725593][ T26] audit: type=1804 audit(1596889017.367:1361): pid=22307 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2665/cgroup.controllers" dev="sda1" ino=16279 res=1 errno=0 12:16:58 executing program 1: unshare(0x30020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000080)={0x40, 0x8, 0xfffffe01, 0x3f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:16:58 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000e00", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:58 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x3f000000) 12:16:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:16:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) r3 = gettid() tkill(r3, 0x17) ptrace$setregs(0xffffffffffffffff, r3, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000b35) 12:16:58 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2cc00e00", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2243.644722][T22327] FAT-fs (loop4): bogus number of reserved sectors 12:16:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2243.705937][ T26] audit: type=1804 audit(1596889018.357:1362): pid=22338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2666/cgroup.controllers" dev="sda1" ino=16278 res=1 errno=0 [ 2243.725252][T22327] FAT-fs (loop4): Can't find a valid FAT filesystem 12:16:58 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x40000000) 12:16:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x47, &(0x7f0000000140)=""/151, &(0x7f00000000c0)=0x97) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 12:16:58 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000f00", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2244.052351][ T26] audit: type=1804 audit(1596889018.697:1363): pid=22354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2667/cgroup.controllers" dev="sda1" ino=16281 res=1 errno=0 12:16:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:16:59 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x48000000) 12:16:59 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c5f1f00", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r0, r0, 0x1e, 0x0, r1}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000007065dfb00f486ce5af87ede4b0000000800ff40fffffffd050001000755749a1367d369b91838ae56b6633ae0c0ecd476f2ccba852dbc677e7a1ed0b0960ea84b0e8f8c4571622fbd"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 12:16:59 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x80010, r0, 0x3000) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:16:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:16:59 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00?\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:16:59 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x4c000000) [ 2244.989348][T22374] FAT-fs (loop4): bogus number of reserved sectors [ 2244.996249][T22374] FAT-fs (loop4): Can't find a valid FAT filesystem 12:16:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2245.157341][ T26] audit: type=1804 audit(1596889019.807:1364): pid=22378 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2668/cgroup.controllers" dev="sda1" ino=16293 res=1 errno=0 12:16:59 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c1f5f00", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:00 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x60000000) 12:17:00 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00`\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) dup(r2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4100000007065deb00f486ce5af87ede4b04000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000b35) 12:17:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:00 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x65580000) 12:17:00 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0ec000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2245.693056][ T26] audit: type=1804 audit(1596889020.337:1365): pid=22403 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2669/cgroup.controllers" dev="sda1" ino=16267 res=1 errno=0 [ 2245.748440][T22402] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2245.794569][T22402] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2245.794635][T22409] net_ratelimit: 45 callbacks suppressed [ 2245.794644][T22409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2245.894469][T22409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2245.950188][T22409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2246.015354][T22411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2246.059071][T22411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:00 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x68000000) 12:17:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:00 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00f000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = gettid() tkill(r5, 0x17) ptrace$setregs(0xffffffffffffffff, r5, 0x0, &(0x7f0000000080)) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="a21056f9fcf5b14a335dc0944e42fb830f6bec774dc0887b4661a764f539e135eaefe2c3dcde9dabc6d386c04bc6a8905332f96d039546d98ea87f877209746a4f8d12f53643ecf5b27aae30385be0eab04b2a80a53882f95c916566abf02947d810661733ab23d097", @ANYRES32, @ANYRESOCT=r1]) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000000c0)={0x0, 0x3, 0x58dba768, 0x0, 0x8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r2, 0x0, 0x100000b35) 12:17:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2246.372988][T22426] FAT-fs (loop4): bogus number of reserved sectors [ 2246.424059][T22434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2246.436660][T22426] FAT-fs (loop4): Can't find a valid FAT filesystem 12:17:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x8, 0x6, 0x2}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400004007065deb00f486ce5af87ede4bf4000008000640fffffffd05000100074134f1cabdad74724b756b44dd5fab6a8c4b05269d47a2c38d91"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 12:17:01 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c004003", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:01 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x6c000000) [ 2246.586901][T22434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2246.605586][T22434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2246.697127][T22436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2246.718319][ T26] audit: type=1804 audit(1596889021.367:1366): pid=22443 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2671/cgroup.controllers" dev="sda1" ino=16275 res=1 errno=0 12:17:01 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000340", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2246.757678][T22436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:01 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x74000000) [ 2246.831921][T22450] FAT-fs (loop4): bogus number of reserved sectors [ 2246.846282][T22450] FAT-fs (loop4): Can't find a valid FAT filesystem 12:17:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:01 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x7a000000) 12:17:01 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2cfffff0", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x322002, 0x0) renameat2(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000b35) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000001c0)={0x800, 0x80000001, 0x9, 0x8000}, 0x10) 12:17:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:01 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:01 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x81000000) 12:17:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2247.275702][ T26] audit: type=1804 audit(1596889021.927:1367): pid=22470 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2672/cgroup.controllers" dev="sda1" ino=16274 res=1 errno=0 12:17:02 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2247.365861][T22481] FAT-fs (loop4): invalid media value (0x00) 12:17:02 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x88a8ffff) 12:17:02 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2247.418727][T22481] FAT-fs (loop4): Can't find a valid FAT filesystem 12:17:02 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:02 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) socket(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r4, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:02 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x9effffff) 12:17:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:02 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:02 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xa11e0000) 12:17:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2415000007065debc5c10c6ac606b5af00f486ce5af87ede4b00000008a6cbfbd9"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2247.893591][T22511] FAT-fs (loop4): invalid media value (0x00) [ 2247.921828][T22511] FAT-fs (loop4): Can't find a valid FAT filesystem 12:17:02 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2248.191626][ T26] audit: type=1804 audit(1596889022.837:1368): pid=22522 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2673/cgroup.controllers" dev="sda1" ino=16295 res=1 errno=0 12:17:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:02 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xa80f0000) 12:17:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:02 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES64], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) [ 2248.387652][T22530] FAT-fs (loop4): invalid media value (0x00) [ 2248.422806][T22530] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2248.529309][ T26] audit: type=1804 audit(1596889023.177:1369): pid=22543 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2674/cgroup.controllers" dev="sda1" ino=16369 res=1 errno=0 12:17:03 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:03 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xf0ffffff) 12:17:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:03 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x4, &(0x7f00000002c0)=[{&(0x7f00000000c0)="137cb18f22b10fae6168554f77ac28ae8ac320c6459f6f9a322bafd65e0433ec9caac29c5db8024332d86415634cbfc1f24f68b3225f204ba68c4e6691ca6be8762e", 0x42, 0xe2}, {&(0x7f0000000140)="7367ea89eb4baf9ee5d99c984d6a7c85fb8f76b64bd418399e6f9224b198ab677f0190de977ca792c4d077d129753ae060dfccc21715fa8d30dff21cbd6019ff7b57df489eac00c04e043f9810f2", 0x4e, 0x9}, {&(0x7f0000001040)="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", 0x1000, 0x3000}, {&(0x7f00000001c0)="f88aae42bc41b59250433c576ea74c22eedb7d6cefba2e83803bbc576008941d0a4d4ddcacdf8e7fdb61551ff80521a9b6263831184afb6aa855478eeaa48944c9351667771094c24c82ee62ba29e0a738dc29cdd2d6a6f6a9b10060c65cb10c5de2de58e0e82540a349be5b3d9862eb8491f3ee1a75ae043d97bc314b81affc75e1770cc04b07fd2662154e2335e98d896424439467924741eddd58d5b86c6883bb3a49d686b0d694cd165408da0f1e076e683ce7db8b9b9bf787913cd004caf48580d14e5536111b0051038a84c8c876ebbbcaef6ab887eb46186fb49b840e0c9c", 0xe2, 0x800000000}], 0x2c1000, &(0x7f0000000340)={[{@session={'session'}}, {@session={'session', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0x9}}]}) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000003c0)={0x3, [0x0, 0x0, 0x0]}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:04 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2249.342505][T22555] FAT-fs (loop4): invalid media value (0x00) [ 2249.350676][T22555] FAT-fs (loop4): Can't find a valid FAT filesystem 12:17:04 executing program 0: r0 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x7fffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 12:17:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xffffa888) 12:17:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xfffff000) 12:17:04 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2249.700451][ T26] audit: type=1804 audit(1596889024.348:1370): pid=22577 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2675/cgroup.controllers" dev="sda1" ino=16278 res=1 errno=0 [ 2249.753649][T22583] FAT-fs (loop4): invalid media value (0x00) [ 2249.768050][T22583] FAT-fs (loop4): Can't find a valid FAT filesystem 12:17:04 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00001f", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xffffff9e) 12:17:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xfffffff0) [ 2250.186015][T22602] FAT-fs (loop4): invalid media value (0x00) [ 2250.205491][T22602] FAT-fs (loop4): Can't find a valid FAT filesystem 12:17:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0xbc1f) 12:17:05 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:05 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x30000000000000) 12:17:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:05 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x44000, 0x0) mmap(&(0x7f00008d7000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x100010, r1, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f00000000c0)) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) [ 2251.257423][T22621] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2251.266626][T22622] FAT-fs (loop4): bogus number of FAT sectors 12:17:06 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2251.290250][ T26] audit: type=1804 audit(1596889025.938:1371): pid=22618 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2676/cgroup.controllers" dev="sda1" ino=15970 res=1 errno=0 [ 2251.316381][T22622] FAT-fs (loop4): Can't find a valid FAT filesystem 12:17:06 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x40030000000000) 12:17:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:06 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000e", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2251.613279][T22637] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:06 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, r0, 0x8000) io_setup(0x40, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x76, 0x60000) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) io_cancel(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x401, r2, &(0x7f0000000180)="2280ebc9f2dceb88b163ff5cc8ff9a9936d41c3c35c69f45d85a2513924bdf47397c3b457fd0ea7f117e945bf848f367bcc820f433b583d40f15bc533a68073fe108958d759f6387ade3e3290d01236ce9a32231be3d4f7713801c551a8acd9ef31059423f203b98c3e4109fc45040121d891b9d10fc18c7c922123903db319113f5a604981f01e2ffb7ac2f48e0ce8c9b6030", 0x93, 0x9, 0x0, 0x2, r3}, &(0x7f0000000280)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f00000002c0)=r3) sendfile(r5, r4, 0x0, 0x100000b35) [ 2251.731336][T22647] FAT-fs (loop4): bogus number of FAT sectors [ 2251.750783][T22647] FAT-fs (loop4): Can't find a valid FAT filesystem 12:17:06 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xf0ffffffffffff) 12:17:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:06 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x100000000000000) 12:17:06 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00f0ff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2252.043199][ T26] audit: type=1800 audit(1596889026.688:1372): pid=22663 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16019 res=0 errno=0 [ 2252.053909][T22666] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2252.104657][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! 12:17:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x3, @win={{0x8, 0xfff, 0x8000, 0x5}, 0x9, 0x2, &(0x7f0000000000)={{0x40, 0xf0, 0x8, 0x4}}, 0x9, &(0x7f0000000080)="665438e9ebcd1c393d0e24dffa031daac3c4974536e602091811099d99d9e15ad1d7eb073e7307ccd406f0a805b46d4e328340bbf0267997a668a1753cb0697f111ad7b86ef56ab2a7eafb97fbf50cd03f533c47892f", 0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 12:17:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:07 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c7fffff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 12:17:07 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x200000000000000) [ 2252.569985][T22681] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2252.591492][T22682] FAT-fs (loop4): bogus number of FAT sectors [ 2252.601672][T22686] net_ratelimit: 20 callbacks suppressed [ 2252.601681][T22686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:07 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c9effff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2252.615942][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2252.656592][ T26] audit: type=1804 audit(1596889027.298:1373): pid=22689 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2678/cgroup.controllers" dev="sda1" ino=16179 res=1 errno=0 [ 2252.699821][T22682] FAT-fs (loop4): Can't find a valid FAT filesystem 12:17:07 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x300000000000000) 12:17:07 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2cf0ffff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2252.967669][T22701] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:07 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:07 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x400000000000000) [ 2253.172945][T22710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2253.181424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2253.238408][T22715] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2253.344545][ T26] audit: type=1804 audit(1596889027.988:1374): pid=22687 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2678/cgroup.controllers" dev="sda1" ino=16179 res=1 errno=0 12:17:08 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)={'syz1', "807e87aedb6c301bbde0b9dcd5b2754f03a3076d455c003d949ebc3cb0b6539869d39d0aede93915c66e9079007475fa5a584ec56cd4a6ef0461af41b8"}, 0x41) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x797aea43fca1ed9f}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x3, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x920d}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x17eaea76}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x40800) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:08 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x500000000000000) 12:17:08 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2cffffff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, 0x0) [ 2254.356212][T22733] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2254.379675][T22735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2254.388319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2254.415023][ T26] audit: type=1804 audit(1596889029.068:1375): pid=22737 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2679/cgroup.controllers" dev="sda1" ino=16311 res=1 errno=0 12:17:09 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:09 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x600000000000000) 12:17:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 12:17:09 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:09 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2254.806805][T22745] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:09 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x700000000000000) [ 2255.164532][T22759] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2255.558118][ T26] audit: type=1804 audit(1596889030.208:1376): pid=22753 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2680/cgroup.controllers" dev="sda1" ino=16199 res=1 errno=0 [ 2255.642434][ T26] audit: type=1804 audit(1596889030.208:1377): pid=22749 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2554/file0" dev="sda1" ino=16229 res=1 errno=0 [ 2255.688832][ T26] audit: type=1804 audit(1596889030.288:1378): pid=22753 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2680/cgroup.controllers" dev="sda1" ino=16199 res=1 errno=0 [ 2255.727480][ T26] audit: type=1800 audit(1596889030.288:1379): pid=22747 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16199 res=0 errno=0 [ 2255.756532][ T26] audit: type=1800 audit(1596889030.288:1380): pid=22753 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=16199 res=0 errno=0 12:17:10 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:10 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:10 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:10 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x800000000000000) 12:17:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="00fb3704dcf7258d4eb6f9b1a5b299dd98118439b5d8e7a7095c14e438ea41395620803ff3fa775a49e807eef05b244032be30e8554e80c3c29065047d372eb9a7e3e62d5f2bff11c60377e0341f30b6a0d594f37d96f0b5d8af220f836d89fb682f81481647db9da7fce9f8fbd4144a2d9ce7e6950384a47a61284d40730cbebca2a30858d03cb75e04767a952258c96ff621199c5896fdc992e1b3bbef1e6af438736605abbb6bccf1f7243f580221ef96d41a3d36e4acbd1f79cd219d43f2af6a1bbb89876a7dd07f71a0e858a539de4de286fe45183a61d3"], 0x37, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) [ 2256.073206][T22773] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:10 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x900000000000000) 12:17:10 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:10 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2256.162659][ T26] audit: type=1804 audit(1596889030.808:1381): pid=22775 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2681/cgroup.controllers" dev="sda1" ino=16288 res=1 errno=0 12:17:10 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:11 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:11 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) delete_module(&(0x7f0000000000)='-#$\x00', 0x800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd240}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3053}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdec}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040080) socket(0xa, 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2000, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap(&(0x7f00004c6000/0x3000)=nil, 0x3000, 0x3000002, 0x10, r4, 0xdd2f8000) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r5, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2256.374283][T22794] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:11 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xa00000000000000) 12:17:11 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:11 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x9, 0x2, 'client0\x00', 0xffffffff80000000, "8c664b62165f51a6", "59ac4669652b0b9b36281d9becaa9ea0c4e4a385d486922909ca953210df8d06", 0x1, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) [ 2256.665944][T22817] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:11 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:11 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xc00000000000000) 12:17:11 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2256.957028][T22834] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:11 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xe00000000000000) 12:17:11 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:11 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2257.289730][T22848] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2257.477846][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 2257.477862][ T26] audit: type=1804 audit(1596889032.128:1383): pid=22820 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2682/cgroup.controllers" dev="sda1" ino=16278 res=1 errno=0 12:17:13 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xf00000000000000) 12:17:13 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:13 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000eba567d4000000000000000000083e00000000000000", @ANYRES32]) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x126) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r2, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x40) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40092}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x4, 0x403) write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000480)={0xa, {0x1, 0x1, 0x43}}, 0xa) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xc5, 0x2d, &(0x7f0000000500)="2322cf3877ed1d1fffe900b118bf1e9351328a5e9cb60a1708a95915ccf0c43a31fef2df99449e2500a75c46dff383a6995750184b67381aab8aeb8b0869504e05e0fe117eca9872fcb3c9aec27a49ee0f712074d43345cbfcdafdd74c5b972764927e89bfdc339fabd492e532db0cf53a3b6a650c5654f0de2a858bf50163000b2fdd2c9375b3057867c3cfb988b411d6554d31d15d41440e330eed7e5849cd64252025b130c62d21160faf5aa5df1541a24fdb0ee11be78d1acebb6cb1d60754ff835d5b", &(0x7f0000000280)=""/45, 0xfffffffc, 0x0, 0xa5, 0x60, &(0x7f0000000600)="cb575eba8eecc06d551cb5141b565d21792741e727cb3294a1f3c3cc07a9f4e8dc1e2eb37c0c1df83ec89ed1b68b46526c639b74113e46baf64a5917e6739e0d7305ed0c503b1ec430f0fbc4809b9bbf55496068d57af6a8e9c27d84a828812a63d511084b2a628d7fc4154c81d0b66e2eef4e7ef356cebe3361f1e1f848e50877604857234af53455c2ff3c6dfd958a04caea066b33b23503440cc56c85f7910f6b72e4be", &(0x7f0000000380)="c6bf2a4195985d4d039fd10d520beb439841e812ee2e5d3cd8e8c804c21a6f9dddfa4bb127867b74dacbf90c19fa06d80562674f818f799f6db9e41e7403124815a8a70e5a2c1b116389e1da4d532a165b0f764bd40e8b382edab63f5b48806c"}, 0x40) sendfile(r6, r4, 0x0, 0x100000b35) 12:17:13 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)=0x20000000) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$pptp(0x18, 0x1, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@multicast1, @private}, &(0x7f0000000100)=0xc) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000180)=0xfffffffffffffff7) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) r3 = accept4$packet(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x14, 0x0) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) copy_file_range(r3, &(0x7f0000000240)=0x800000000000a02, 0xffffffffffffffff, 0x0, 0x8, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="9614cc30ffffffbf0100000004000000771414bbe074fb006401fdf5ac1e0101"], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) [ 2258.578175][T22882] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:13 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2258.713496][ T26] audit: type=1804 audit(1596889033.358:1384): pid=22893 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2683/cgroup.controllers" dev="sda1" ino=16280 res=1 errno=0 12:17:13 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x1000000000000000) 12:17:13 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00', &(0x7f0000000180)='\x00', 0x1, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x80010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r3 = gettid() tkill(r3, 0x17) ptrace$setregs(0xffffffffffffffff, r3, 0x4, &(0x7f0000000080)) tkill(r3, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r6, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r6, 0xda1}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r1, 0x0, 0x100000b38) [ 2258.993732][T22911] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:13 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:13 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x2000000000000000) [ 2259.181651][T22923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2259.190102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b000000080006402274ad7b0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) socket$key(0xf, 0x3, 0x2) [ 2259.265243][ T26] audit: type=1804 audit(1596889033.918:1385): pid=22920 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2684/cgroup.controllers" dev="sda1" ino=16278 res=1 errno=0 [ 2259.319133][T22931] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:14 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x3f00000000000000) [ 2259.532731][T22943] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2259.592819][ T26] audit: type=1804 audit(1596889034.238:1386): pid=22942 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2685/cgroup.controllers" dev="sda1" ino=16295 res=1 errno=0 [ 2259.595624][T22945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2259.626426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:14 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc87dd000) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r2, &(0x7f0000000000)=[{0x2, 0xfe00}, {}], 0x2, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x7fff}], 0x1) semctl$SEM_STAT_ANY(r2, 0x2, 0x14, &(0x7f0000000080)=""/250) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:14 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:14 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x4000000000000000) 12:17:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x8) 12:17:15 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2260.434392][T22961] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2260.472359][ T26] audit: type=1804 audit(1596889035.119:1387): pid=22970 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2686/cgroup.controllers" dev="sda1" ino=16290 res=1 errno=0 [ 2260.498789][ T251] attempt to access beyond end of device [ 2260.508581][T22971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2260.517028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2260.528789][ T251] loop4: rw=1, want=230, limit=54 12:17:15 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x4800000000000000) [ 2260.566525][ T251] attempt to access beyond end of device [ 2260.589525][ T251] loop4: rw=1, want=62, limit=54 12:17:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x14) recvfrom$phonet(r1, &(0x7f0000000200)=""/108, 0x6c, 0x20, &(0x7f0000000280)={0x23, 0xad, 0x77, 0x8}, 0x10) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) r3 = gettid() tkill(r3, 0x17) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x6b9) ptrace$setregs(0xffffffffffffffff, r3, 0x0, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRES16, @ANYRESDEC=r5, @ANYRESDEC, @ANYRESOCT=r0], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x8) 12:17:15 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2260.803156][T22983] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2260.896231][T22994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2260.904650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2261.563209][ T26] audit: type=1804 audit(1596889036.209:1388): pid=22985 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2687/cgroup.controllers" dev="sda1" ino=16273 res=1 errno=0 12:17:16 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:16 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x4c00000000000000) 12:17:16 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:16 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x10, r2, 0x0) socket(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) mmap(&(0x7f000068a000/0x3000)=nil, 0x3000, 0x2, 0x10, r3, 0x5f384000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:16 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00f0ff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2261.848134][T23007] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2261.877532][T23014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2261.885961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:16 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x6000000000000000) 12:17:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2262.001358][T23020] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:16 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000200", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:17 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x80, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000f2a55b98055deb004986cef87ef5b718415af87ede4b000000080006ffffff"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x1000) 12:17:17 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x6558000000000000) 12:17:17 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000300", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2262.402133][ T251] attempt to access beyond end of device [ 2262.402287][T23037] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2262.414987][ T251] loop4: rw=1, want=230, limit=54 [ 2262.438486][ T251] attempt to access beyond end of device 12:17:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2262.469454][ T251] loop4: rw=1, want=62, limit=54 12:17:17 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000400", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x5) r2 = dup3(r1, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x36}]) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000240)="bdd8d4e9323b649aa5a65a220ff1a04e3f1e48507f28465d93bb7efae61c74f1c2003b5302d9aba7c1f5c141aa0ac3453f907508190c9869c4420de8cbb1f553396b5c1f0d939f", 0xffffffffffffffbf, 0x4, 0x0, 0x0, r4}, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) flock(r5, 0xa) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000007065deb0000000008000640fffffffd05ab15c8f6387cc2ca8f3910be683022ec27ff5247f6e9b28fa5096296d6a0c4e3a67c7b50fce476ece118af832839d1b0188361bfb049dc3a3db1ed281798c1dc4d14fecde295b7b038bce273aa121282d51c8f26727d1fdedf74d618cf35a1c7c3811a158d51ec5c4f010000000000000023d538fb8403be8fb7eac1bdf15c7e06ba9761058d15a5b4ffd869e2a5c286cc933c1a9135f058bacf169d7ab0577dc0d25bdf8c5c305ff2242c9b3749c6151d2d7ffb96db2f3724a3425c68804783a4dd3227d8"], 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000b35) [ 2262.572153][ T26] audit: type=1804 audit(1596889037.219:1389): pid=23013 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2558/file0" dev="sda1" ino=15785 res=1 errno=0 [ 2262.680787][ T26] audit: type=1804 audit(1596889037.309:1390): pid=23044 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2558/file0" dev="sda1" ino=15785 res=1 errno=0 12:17:17 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f00004ec000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x2fe2d000) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:17 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x6800000000000000) 12:17:17 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000500", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2262.815234][ T26] audit: type=1804 audit(1596889037.439:1391): pid=23050 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2689/cgroup.controllers" dev="sda1" ino=16288 res=1 errno=0 12:17:17 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2262.867517][T23067] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2262.877882][ T251] attempt to access beyond end of device [ 2262.891636][ T251] loop4: rw=1, want=230, limit=54 12:17:17 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\b\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2262.919922][ T251] attempt to access beyond end of device [ 2262.961306][ T251] loop4: rw=1, want=62, limit=54 12:17:17 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x6c00000000000000) 12:17:17 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\t\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2263.128114][T23079] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:18 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x7400000000000000) 12:17:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:18 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000e00", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2263.386769][ T251] attempt to access beyond end of device [ 2263.398363][ T251] loop4: rw=1, want=230, limit=54 [ 2263.416895][ T251] attempt to access beyond end of device [ 2263.428639][ T251] loop4: rw=1, want=62, limit=54 12:17:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x444800, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x1, 0x4) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000140)={{0x0, 0x0, @descriptor="2727a4538f7c0af7"}}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="339dd6d4f623ea00008847000000009c1200000000000000", @ANYRES32]) sendfile(r1, r3, 0x0, 0x100000b35) [ 2263.503100][T23093] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2263.709336][ T26] audit: type=1804 audit(1596889038.359:1392): pid=23104 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2690/cgroup.controllers" dev="sda1" ino=16281 res=1 errno=0 [ 2263.842862][ T251] attempt to access beyond end of device [ 2263.849834][ T251] loop4: rw=1, want=230, limit=54 [ 2263.876678][ T251] attempt to access beyond end of device [ 2263.902615][ T251] loop4: rw=1, want=62, limit=54 12:17:18 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r2 = dup(0xffffffffffffffff) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000080)={0x3, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1, 0x3, [{{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e20, @multicast2}}]}, 0x210) r3 = socket$caif_stream(0x25, 0x1, 0x2) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40400, 0x0) dup2(r3, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:18 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000f00", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:18 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x7a00000000000000) 12:17:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x301000, 0x0) r6 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, 0x0) flock(r0, 0x8) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000140)={0x7, 0x8, 0xa, 0x0, 0x0, [{{r3}, 0x9}, {{r2}, 0x4e}, {{r1}, 0x80}, {{r1}, 0x100000000}, {{r4}, 0x37}, {{r0}, 0xfffffffffffff34b}, {{r1}, 0x7}, {{r0}, 0x6}, {{r5}, 0x7}, {{r6}, 0xff}]}) [ 2264.234551][T23118] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.244409][T23122] net_ratelimit: 6 callbacks suppressed [ 2264.244418][T23122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2264.258519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:18 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00`\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2264.282756][ T26] audit: type=1804 audit(1596889038.929:1393): pid=23116 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2691/cgroup.controllers" dev="sda1" ino=16281 res=1 errno=0 12:17:19 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x8100000000000000) 12:17:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x27, 0x1, 0x8) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x1) ioctl$TIOCCBRK(r0, 0x5428) 12:17:19 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00f000", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2264.534068][ T251] attempt to access beyond end of device [ 2264.539750][ T251] loop4: rw=1, want=230, limit=54 [ 2264.574304][ T251] attempt to access beyond end of device [ 2264.579989][ T251] loop4: rw=1, want=62, limit=54 12:17:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2264.616125][T23137] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2264.922407][T19773] attempt to access beyond end of device [ 2264.930376][T19773] loop4: rw=1, want=230, limit=54 [ 2264.959281][T19773] attempt to access beyond end of device [ 2264.995262][T19773] loop4: rw=1, want=62, limit=54 12:17:20 executing program 1: socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:20 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000003", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:20 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x88a8ffff00000000) 12:17:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000180)={0x3e, 0x6, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) prctl$PR_GET_DUMPABLE(0x3) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='rdma.current\x00', 0x0, 0x0) write$P9_RLOPEN(r4, &(0x7f0000000200)={0x18, 0xd, 0x1, {{0x10, 0x2, 0x7}, 0x9}}, 0x18) [ 2266.023964][T23168] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:20 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x9effffff00000000) [ 2266.115759][ T26] audit: type=1804 audit(1596889040.769:1394): pid=23167 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2693/cgroup.controllers" dev="sda1" ino=16293 res=1 errno=0 12:17:20 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000005", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2266.293980][T19773] attempt to access beyond end of device [ 2266.299689][T19773] loop4: rw=1, want=230, limit=54 [ 2266.312281][T23185] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2266.319028][T19773] attempt to access beyond end of device [ 2266.367519][T19773] loop4: rw=1, want=62, limit=54 12:17:21 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\t', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:21 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xa11e000000000000) [ 2266.734773][T20218] attempt to access beyond end of device [ 2266.740446][T20218] loop4: rw=1, want=230, limit=54 [ 2266.754812][T20218] attempt to access beyond end of device [ 2266.760484][T20218] loop4: rw=1, want=62, limit=54 12:17:22 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x11) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r6, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000080)={r6, 0xe3, "0b57575e6063c4c08a7e92c3663289c84299aaca92101602d96186be8f35eddafbe87a9d66c8788a5f484df165c79eabe827d0fe38f821cbcf72306911b6460f56cd996901066ca96efe3d367098284326906a5e849bd7eb87852d563e3ca76085306d258d73fa62cbbfbc36d01dc20f789984e259f72b1dde27ac68829427251f5a8844fb7ce7366e09e7022f9aa3079b9247aa563f555635e8272866655e88ac096848e65d9b639ce61ae1abf03da6c1170c33d89ac33174eb4683b9a07cbb2f422bfa03bd71c1d0ec906b8e242507de2f15a5207b1b02b78ea49da0a4373eea430e"}, &(0x7f0000000000)=0xeb) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r7, 0x27}, &(0x7f00000001c0)=0x8) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) fchdir(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:22 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000e", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) getsockname$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f0000000180)={0x1ffe00, 0x3, "f0dee3c75fb2a26e5b2321e264f4d3d37ad5d1f4461aeef0bef04b5e76c0f3f6", 0x4f8dc5c0, 0x0, 0x8, 0x6, 0x284}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0xb}}]}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}, @ETHTOOL_A_RINGS_RX={0x0, 0x6, 0x6}]}, 0xfffffd58}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) syncfs(r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r2, 0x0, 0x100000b35) 12:17:22 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xa80f000000000000) 12:17:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2267.403361][T23216] __nla_validate_parse: 1 callbacks suppressed [ 2267.403371][T23216] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:22 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00c00e", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:22 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xf0ffffff00000000) 12:17:22 executing program 0: write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x6, {0x7fffffff}}, 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x0) 12:17:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2267.635638][ T251] attempt to access beyond end of device [ 2267.641395][ T251] loop4: rw=1, want=230, limit=54 12:17:22 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000f", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2267.683397][ T251] attempt to access beyond end of device [ 2267.689073][ T251] loop4: rw=1, want=62, limit=54 [ 2267.766866][T23232] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2267.850652][ T26] audit: type=1804 audit(1596889042.499:1395): pid=23218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2562/file0" dev="sda1" ino=16286 res=1 errno=0 [ 2268.516355][ T26] audit: type=1804 audit(1596889043.169:1396): pid=23256 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2562/file0" dev="sda1" ino=16286 res=1 errno=0 12:17:23 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400afa6f8cf7ede5eb71b14a7912f1f753edcbdc64b00000008f60000800000faffffffffffffffea0000000000"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 12:17:23 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xffffffff00000000) 12:17:23 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c005f1f", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2268.743132][T23273] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2268.763513][ T26] audit: type=1804 audit(1596889043.419:1397): pid=23274 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2696/cgroup.controllers" dev="sda1" ino=16369 res=1 errno=0 12:17:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:23 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00?', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2268.888837][T20218] attempt to access beyond end of device [ 2268.926863][T20218] loop4: rw=1, want=230, limit=54 12:17:23 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xfffffffffffff000) [ 2268.953110][T20218] attempt to access beyond end of device [ 2269.008718][T20218] loop4: rw=1, want=62, limit=54 12:17:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b15) 12:17:23 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c001f5f", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2269.450358][ T26] audit: type=1804 audit(1596889044.099:1398): pid=23305 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2697/cgroup.controllers" dev="sda1" ino=16295 res=1 errno=0 12:17:24 executing program 1: unshare(0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x13, r0, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x30) r1 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:24 executing program 2: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002a00)=ANY=[@ANYRES64, @ANYBLOB="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", @ANYRESHEX, @ANYRES64=r2, @ANYBLOB="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", @ANYBLOB="44f8e4d3b068e0f1fe5f3cc3d58ffb4386d021f36f7c1066e28835d7fad9d43f3b0f3accb8514436380c6beded6ab5b938525f8cd31ba7616b836acc4136511ec756d85bffdec153f61c50db660526befddbc3ce6dbcc30e0d29bb1cc827fa0ee8d315c0b7a50466d1886ad9cd3d028946bc6f637702abf7c7e5826a425ffdd49515008735fe5ae310", @ANYRESDEC=r0, @ANYBLOB="ef57dd6c8658e084555e36b87efab5b0003d363517f8f34e7332", @ANYRES32], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x800003}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff, 0x3}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8800}, 0x48000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$inet6(0x10, 0x2, 0x0) keyctl$assume_authority(0x10, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r8, 0xc0905664, 0x0) open_by_handle_at(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4000) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r3, 0x0, r5, 0x0, 0x400000, 0x0) 12:17:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:24 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00`', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x600140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x40, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007", @ANYRESOCT=r2], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000b35) [ 2270.111259][T23323] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2270.152299][ T26] audit: type=1804 audit(1596889044.799:1399): pid=23327 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2698/cgroup.controllers" dev="sda1" ino=16342 res=1 errno=0 12:17:24 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000ec0", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2270.299461][ T26] audit: type=1804 audit(1596889044.950:1400): pid=23332 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3096/file0" dev="sda1" ino=16281 res=1 errno=0 [ 2270.334027][T23332] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:25 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x7, 0x1}, 0x9) close(r1) socket$inet6(0x10, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x131400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[], 0xfd53) splice(r0, 0x0, r1, 0x0, 0x400000, 0x0) 12:17:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:25 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000f0", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:25 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2270.563536][T20218] attempt to access beyond end of device [ 2270.577122][T20218] loop4: rw=1, want=230, limit=54 [ 2270.599194][T20218] attempt to access beyond end of device [ 2270.618903][T20218] loop4: rw=1, want=62, limit=54 12:17:25 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00@', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:25 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffdfffffd, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x60000, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="4b17000000000000"]) 12:17:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:25 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000003", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f00000000c0)) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000240)) accept4(0xffffffffffffffff, &(0x7f0000000140)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0x80, 0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='cubic\x00', 0x6) sendfile(r2, r1, 0x0, 0x100000b35) 12:17:25 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2271.119031][T20218] attempt to access beyond end of device [ 2271.136353][T20218] loop4: rw=1, want=230, limit=54 [ 2271.146870][T23359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2271.151922][T20218] attempt to access beyond end of device [ 2271.155307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2271.172181][T20218] loop4: rw=1, want=62, limit=54 [ 2271.191745][ T26] audit: type=1804 audit(1596889045.840:1401): pid=23358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2699/cgroup.controllers" dev="sda1" ino=16293 res=1 errno=0 12:17:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:25 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00ffff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:26 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r8 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x4, 0x292503) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r8, 0x80045700, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r9, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000280)=""/142) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000040)={r9, 0x2, 0x4, 0x6}, &(0x7f0000000080)=0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x140e, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:26 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f40200000000000000000008000640fffffffd0500010007"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x1, 0x7f, 0x3f, 0x80}, {0x9, 0x3, 0x0, 0x42a}, {0x1, 0x80, 0x9, 0x200}, {0x20, 0x5, 0x0, 0x3ff}, {0xfff8, 0x0, 0x80, 0x3}, {0x0, 0x20, 0xff, 0x4}, {0xc2fe, 0x20, 0x40, 0x3}]}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(r1, r2, 0x0, 0xb) [ 2271.660478][T23384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2271.668860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:26 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:27 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x5, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e50784d7a2e09b0c0636d61f884de91fe3765ace78246123615c8267dc0c715cdf8d45b702524b50693fec1d0826236308509dac99a259464d471adc712fff6ca45a3658220e63482eac765f13039065f5cf8bf568108cba9e1482ec2016913350634c3596bbeef04a96eaa66fd5e29aa6676843f747676e261a8ff0f652f660169563f7115a21f1308b8baed82dfaa6fd6115fd1058642583f47f25d4c1bc69a02e8b5e3af2c227b39c8407711f7f252461552836c3c7088fca9e163cc5636f978a27cb2392163950b50350951edcdc89b064bfa9a906541acddbaad335fd0d276e306397", 0xe5, 0x806}, {&(0x7f0000001040)="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", 0x1000, 0x7336}, {&(0x7f00000001c0)="61c11eee4ef3b9200352a1db916ffd377b3422ae0a9e61907df88f0e075d8ea95dbb979070202c577fa71a8b1af992ee654d80b91439c3d1e955683919a8a7d901d2b6af575b67583a7a1f51e5bff1a577c616a91d41cd675180ee563981d3bf2cd38f8a9b816fc861c2f9b34027f7e92eec65fb978149ae3eeb45f7d7393219138b4e2edbe892ca9fa8d1ad3f", 0x8d, 0x3}, {&(0x7f0000000280)="6e2af2c301277ae05865c6b0a8990b9bdb836f64345806a5f0d68b6cff956622ca7edb4b906b25ff9fb8532b398aa808c462e5ffc6b000285d1253d215c7b68ba944a07a051793090e6193c6a8f80fbda8f8e0dd623c041c449c9b479f4dcb2329d32a0cc30bad4177b6182642245d8111f4da6c740febb19555f823f6f2d2ca769f489139b64c2e896dbf3ae393c3aea57cfc31fcf9d8965de8000509988acda48f608e2f939d537034", 0xaa, 0x1}, {&(0x7f0000000340)="b9f68cda846863a16709df4c83b6a1a50f631b361648a433dfe49d5f87e3e0d3821950169f37fad5a1002e8b717f5802f26328f7eeb7d788a984d365bd5aad64e1100d0fc0e1d18935ddfe5caaf8fc95835426fa3ef0925e3c3269f777f99f8aced256a8a6eb8858", 0x68, 0x5}], 0x2004, &(0x7f0000000440)={[{@huge_advise={'huge=advise', 0x3d, 'b:+'}}, {@huge_within_size={'huge=within_size', 0x3d, 'cpuacct.usage_percpu_user\x00'}}, {@huge_never={'huge=never', 0x3d, 'cpuacct.usage_percpu_user\x00'}}, {@gid={'gid', 0x3d, 0xee00}}], [{@hash='hash'}, {@appraise='appraise'}, {@obj_type={'obj_type', 0x3d, '(/^'}}]}) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x810, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/154, 0x9a}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/196, 0xc4}], 0x4, 0x7, 0x9, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 12:17:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:27 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:27 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgsnd(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="95"], 0x1, 0x0) msgrcv(r5, &(0x7f0000000300)={0x0, ""/210}, 0xda, 0x0, 0x0) msgrcv(r5, &(0x7f0000000080)={0x0, ""/35}, 0x2b, 0x0, 0x0) msgrcv(r5, &(0x7f0000000000)={0x0, ""/74}, 0x52, 0x1, 0x2800) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2272.697136][T23413] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2272.717518][T23420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2272.725961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:27 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:27 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000000)={0x4f, "ec17db4fdf1e3422389d5ac1f9da97b5e349cd528e0de2a37a0a1cb371fc6bf17584fa868d5476363f0a459870a9da8076b01c88b38063403ec0ef848a255109bad9e55d1e70dc854088ade5b6826a5b8a51df2f598b197ea470cdd22ed0f54aab6f47a52c23b3bf92803edf18a58384f171c93b43532a9a06502369281765cc"}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x9, 0x0, [], [{0x9, 0x5474, 0x1, 0xd21, 0x100, 0x9}, {0x9, 0x7, 0x3, 0x101, 0x3ff, 0x2}], [[], [], [], [], [], [], [], [], []]}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:27 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2273.050171][T23431] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2273.126484][T23437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:27 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) recvfrom(r3, &(0x7f0000000000)=""/182, 0xb6, 0x2121, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @remote}, 0x0, 0x4, 0x2, 0x4}}, 0x80) [ 2273.203519][T23437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2273.331903][T23446] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2273.353805][T23437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2273.374258][T23446] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2273.552907][ T26] audit: type=1804 audit(1596889048.210:1402): pid=23424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2701/cgroup.controllers" dev="sda1" ino=16279 res=1 errno=0 [ 2273.623464][ T26] audit: type=1804 audit(1596889048.210:1403): pid=23423 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2701/cgroup.controllers" dev="sda1" ino=16279 res=1 errno=0 [ 2273.703362][ T26] audit: type=1804 audit(1596889048.340:1404): pid=23453 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2701/cgroup.controllers" dev="sda1" ino=16279 res=1 errno=0 [ 2273.907325][T23442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:29 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x1304000, 0x800}, 0x20) 12:17:29 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:29 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x200, 0xfffc, 0xfffe, 0x4fe5, 0x15, "0a0f5dbd4e3a81d5"}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2274.480402][T23466] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:29 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:29 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={r7, 0x3d07}, &(0x7f0000000240)=0x8) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r8 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r8, 0xc0905664, 0x0) r9 = accept(r8, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000100)={0x6, 0x1}, 0x2) 12:17:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:29 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2274.869306][ T26] audit: type=1804 audit(1596889049.520:1405): pid=23482 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3103/file0" dev="sda1" ino=16295 res=1 errno=0 [ 2274.927250][T23482] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2275.087283][ T26] audit: type=1804 audit(1596889049.630:1406): pid=23488 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3103/file0" dev="sda1" ino=16295 res=1 errno=0 12:17:29 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2275.235787][ T26] audit: type=1804 audit(1596889049.700:1407): pid=23488 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3103/file0" dev="sda1" ino=16295 res=1 errno=0 [ 2275.351061][ T26] audit: type=1804 audit(1596889049.720:1408): pid=23492 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3103/file0" dev="sda1" ino=16295 res=1 errno=0 12:17:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:30 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000000)=0x7) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:30 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2276.257296][T23512] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2276.289190][T23517] net_ratelimit: 6 callbacks suppressed [ 2276.289199][T23517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:31 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xf6, 0x200000) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000140)={0x2, 0xffffffff, 0x5, 0xffffffff, 0x6, 0x3f}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r5, 0x4) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000000)) socket(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r6, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x40080, 0x0) 12:17:31 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) syz_mount_image$erofs(&(0x7f0000000100)='erofs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0), 0x0, 0x8000}, {&(0x7f0000000200)="cb9e735758258befee3e6f2815524e3de5639581cc6ed16713e636ca43f28604421ae73b73f2758da04e003b4e739536f61b96173f8057499baff425dda03fbc34c3c0e121034b21dbc1070387a94dccd024d688aeeb41d80dc9c238d8059e96a078e017fcd6b6c4d4cc0f8eebb9518cc11e3a534840c5809bc3ecc8c19b420312872a07992c514f726eba9430f392b71bbd425e25ff064314330a84e5ba4475b822b35befa0cd8daf6f684632972ff8a6a95c5729dc956d0b050ca75b8e309a4660024a599107", 0xc7, 0x7f}], 0x40, &(0x7f0000000340)={[{@noacl='noacl'}, {@noacl='noacl'}, {@fault_injection={'fault_injection', 0x3d, 0x7}}, {@nouser_xattr='nouser_xattr'}, {@noacl='noacl'}, {@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x9}}, {@user_xattr='user_xattr'}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@permit_directio='permit_directio'}, {@obj_user={'obj_user', 0x3d, '--:{#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!+@'}}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@context={'context', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '&/&-(*}%'}}, {@pcr={'pcr', 0x3d, 0x39}}]}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}], 0x58) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2276.521404][T23517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:31 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2276.587810][T23517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.660034][T23510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.689620][T23510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2276.710962][T23530] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) fcntl$setflags(r5, 0x2, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:31 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00ffff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2277.010053][T23543] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}], 0x58) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2277.046243][ T26] audit: type=1804 audit(1596889051.700:1409): pid=23543 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3106/file0" dev="sda1" ino=16342 res=1 errno=0 12:17:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet6(0x10, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfd53) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) splice(r4, 0x0, r1, 0x0, 0x400000, 0x0) 12:17:31 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:31 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00ffff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2277.228528][T23550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2277.385367][T23550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2277.459728][T23571] sctp: [Deprecated]: syz-executor.1 (pid 23571) Use of int in maxseg socket option. [ 2277.459728][T23571] Use struct sctp_assoc_value instead [ 2277.573333][T23550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2277.585636][T23545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2277.595030][T19767] attempt to access beyond end of device [ 2277.600702][T19767] loop4: rw=1, want=230, limit=54 [ 2277.630432][T19767] attempt to access beyond end of device [ 2277.642187][T23545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2277.672529][T19767] loop4: rw=1, want=62, limit=54 12:17:32 executing program 1: unshare(0x20a00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:32 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000f0", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:32 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r8, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r8, @in6={{0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, 0x6, 0x8}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000180)={r9, 0x8}, &(0x7f00000001c0)=0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}], 0x58) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:32 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c007fff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2277.837086][T23580] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:32 executing program 2: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r0) r1 = syz_io_uring_complete(r0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) io_setup(0x2, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) signalfd(r3, &(0x7f0000000040)={[0x1]}, 0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53) sendto$x25(0xffffffffffffffff, &(0x7f00000005c0)="7336880f84ab3f15c130b492a1bacf6c307e8c947d41292c8607179946429224baf7cec715fdff60ffe1c88476f2f6b2de0e565c4346151b44cfdb09a5b8277e284679400fa6d687a04c114c27108248591b28f2c23ab200663df81bc6560ebcb3a3805f9da31820aaa65c6f7768a33147672d255cbdeb5e070872f83f7b3f1a4035c78aac96724188ef2f1b3bf4e99c8b65b4f639e834082869cf5c59a55954dc9a378d2dddfb9c62220ab83594c943455f33306b2f5ec9fcfda6f6255aed2add9ff69d42dc658f04c2b77445185e98a0c310ad9c96de5560e56be63622d747b1534fbf039813c4c638443bcc69ad48b80d504401f20108b0ff814a651b5ac72bacd44950aaf85821f30db95639a0502a94d9a93c4f293db120eae2106e8cd1d31277282fc7f78f36bb97816c77c8c69b07531def871f784f2b6aa7f6bfdf5acad98173ed65c5cbf7f551c1be34b1c06626b1009b704a1fbe519b945e2672b9c849a41281d5a74cb33e65c1a04365ec6232cf5ee8fafb680bf492ce5946429785bc4cebcb9cf8d78bf75e8a6b08c5c03c42c7140944c02967fa7e9838050e3a61392cc74355345ff16bd321d92974b91b98d48c7d4d8fadfd5c9d7c3898dbeff89caf9668e5b4a615d15f52ad87c939797dbd82211875d320658aeee923f7ae588ca3470d71079a184a1f0ff917737d388c4f3c0e02d41886e5efbb44a1d99d52ab5b68760596a116d888f71b3c261e5471a8d74aa974550145952610be0c7bf70f6ba4e2f04080d48bf3e5607b23543e0213ffcf56c3e59470b94e54de52de2251d5052eda6be38e6e56a5421436b1293d5500899aa75d19fe3362380b1824f6ee3635acda860c4f72e33c4f2d93a23755dd2254aa012e54cad7ac0432671fe331fae55be85bfb49d37909c14ff920a6dc189031e0b83da6670003429287ed07b683d7bbdfcc60757946a5a9bb4d67568a2cee01f6569a9ce9869978e7e5285d9bf7712f966d39545acc14e4dbc9225725c10c545344bcae88c99ecdeca20a6f41076a19935afdc25081c5e3d2bf82140c82dd2f417a2f03e8a678b4526b4f176f197d1a099e373b919e254f0de51efd86dcc698d5ce929fbccead51096603be4a0febb4af397918b8b9da3f6e57ac3e08bc073ac045a06640712a0837c3d5a88dc11797e31b8a1dd9ab85b701270beb7395d7f830e31be20fb8bbc19cdc625efd87a5ab81f2c85026b78a9cd85b43b9cf977285d518372c3a55f4abdbfe66b5af7e0dea4b3a38e9eb4c4423cdf90326374eea6c7b60ab27b37a6fc8a0aac4fa285006f6f6acb032f829be37f353ed14b8b71e4705ff8bb1100da4cc1b7516b0fa9daec4a9420ad802ab27dcddd4485b2cfae06c2bfe782ee729255b26734fdfa3108da94d2bd0b30c1235a792addf4c375510afd9bdc1f741e9bacaf10d21bc41d3c63363a06c9ad60980a1290b87e7ebfc97caa9b79c93d80dd7bd2bfdddbaac1d44ac4c7be463fe0f7b351b43df817ccc300429835adea2a7a3fe371daf39e24fc979415a5eeb854f6b417bb4fb61f7c9cf196cfca16f0c94ef27909e79b646db0cdc8ed2f9f46b06d4f7e7bb30d307d5d14e1fd7f30ee54dc849a853535224737a63c656edc31f1fb66fce303c69c9af4e63ad31cea8a339a02376ab1c54fc3c7dc4d75eee197d59bc84ff52d3024f29d9a09d53c6ae665b61ca501849dc4aee64f9cd114efd954d5dd15fbeac6c8e1df159c6d897d5b0aeb05944fcb879561255c8c726474ca8f1ea7454471a2cf834426e618ad237b40f54c82e80b595d00e10f07b3a323b3de79275185963abe930d5bc89fd3d56216f826887526822df5d2c2e38e30bf65fedf2b3874e54037cb97198f009296c2d9ddd68d825b22088e6e6c45e2746aa5f688b76bdb931bbbbbf7e0bf3715d4692fe04bdadcacc6b7b75e4d9b8a337320e32e4fd0caf9c00920d74e2ab2171b6c21958dd5deb797be2f28a818798efacc8c08d36a055915b0f2cae3ba967bc2d354928ee32a4d8ca2be046317e384ea75428f0a14a81978fead434ada8f341fdd1381a596161b0d189f4d45b9366a4ec66f1f8392694d11874bd743912053e89538af838d0c6735cea9b073d93fec28221f4d27d534723efc8407ed128734efbc618b98b1e1841427dfe2a391b12bdcb617247481b1c946e4dee5616ef06ec4349e2b3adea2f095e4897f47fff93d63f01484c5f3ccfad951cbfca572cb012f32084491926d72df8140a62bec3c1bc367e62447016b772e9769995bf81201e879319337d83de76738f82f3e2ac5f0c345012a02dc934b2b867123f8d905437103fe5ef0ffbe96a491dd6bac05d8f856fc63e4e74203d6cf64813f6b304e17792546cbec4534f8e73aad9a5f0950752427da08ba4a32e05d094fbfab32e20a75b3b444f8140c438dd6bf6b1c37fa1e8ad04a52f02149235b7a65b43f4328774893a2e3aa08c79e7f68cee203a90ffc85da909f9c7680d2f3c0b39ffb56e62a765bcc21849286f9c202c45055630168ccb54839cb9ddf11b906b569fc78de1c12326c23d986064f8de5cb1e824283e048191a6b3136b979c977b3af0ba58966986edb2a2915cf44903a77287927e74fdbae40af99d604004262c5678c44896f97045d32b73f0cb4d43f8878911fab45b5c6f268f4cd6e78a60a3653e7ce0e9b52da4d27a278031579215934077719c4b96fe3298775d4fece6028e6fabc987fcb20da3a72799d35ef5dc2ed755da4b8cd7fbdfe27b7e850b4a3329e49961f34ee540815d386f6f99804578d4b2576552b68d1f415c30ddc4cbebdfd85de5f158aac65c828dee8d0d18aa30dccb8d22333d49c865dbf61ed5f7223a29c9a14c2dfea6d1f72c6b41d75a1d526b7dedbd09fb8ead6463cac0fe86f561f3ad4a71145d036fdcfe1b8ec2a4853fb2332d31ce28141efb632c317d6d9bd1ebfa2a66c7570b8adf83d9dff48633837784b91b198a7bc030f5d880e411442644b005cc6fc4d29e9517b6a1838125568f93d705615ae38d1b469085399a324f9e7817e6f8a43f23d37a7ce045d3f797e53d10b628b776f132b7f72ec77451e0eb6d28838f6b1b474bbf4f8b4800f0654d326c86bd7b155113bdde0cbdd58e72ee5976f9d320f12e5c665af5f89bcc260c91f96d289ff7e0af276c21270193840665078e75929c7d2f3d459a26e2a2a5a036ec6a611ee915d0a3ca5b83552ba1e4e1ad04b487a9088cb82a859280d0c82abfd1f48eaa9e32759a5a71116b551706999d9519453fdd2ea527039d697da625724f321e18033371f09050456900c834e4baa2bb08564fbf88dd14280a5bbc0c7bfaf3c3706105524891081c00bf3238e6e66080d54d9309596575a11057497d74c69198c4476f577309d232eed8c51e1c749829881c21267cab8864964c1a74c6b61c678a4bf2363f111878c10ee8523ed3793c166919828fac40326ee6d97269e1253e747614e5ab0053b27457692995c965f7034e40c504882b4fb55c1883e80ed1564246807b334ee5559b010ba3ec7aae9bcc7272082f58c3b33d94d4fc7702522473c435f58d8d3281297111506abde81d6ec2903c6a762950608403f6bf2c39dbaf678b840b3d36d0c6aab5618cb320d9cf2cfc6ae50af3f256e32ac95dfef04ca665813a5f82ecce894856030a63a7dde57586c0607e9e68ef9adc94c106eedf05d0bc2ab5a7b30b4a448586aec827f16a425931be89686339522ab026a3ef5b0f83b1f6d41963fc96724af6c8e6dbef9b33246d7201cc77b72e8af84c4e42c03ea7188553ae28f5006737149e2d7e7373142a760f1f059fab44856c0c59ed04b7d69a0f5b10905276952b89783651e910120c2c9c4c83d4d7cbe6fc009b2bc0db916a865589c1c68105fa909bce077695651afaf71494b94d32e748b4a2a26612bda52aff5e2037051d804224fb92be3fbb0ff44419d533728ebe44bdf07b6333c0d64d1b7733fedfd2725d6cb90059ccdec4f2df0036d19cedb6465afadbc0d1afdb23d60631f486dbe98fd1eb7482e82494be80f9a8cf702fe88df075c4c6c6fa46298bbb02f494907fbe41c6bb76890d5d74553b3a33db136f4558a257d2909db8f38c2f9ad4b85059c44ebbbd359bedb1561ed7b7cc7a3d97bc45fb05f4f2cfa515fdc247367780626fb2ee094b178d66a16267d63251bc74b30f91f1eed478667207183b055fde7d6b526cdac3514ae0f374d0b2a1a9c0129f5009ce15317f697f356e7f72ac9cea037098c5b3ddfcb7e631deee58129c79c147b73691c2889b5a0c0f8c55c73585251c2edeb9d02c4035d640908f1edf90e9234a39063454a0bbf597cb4a8adbb7540d23e87eb27385dad546c7e95bf7565a6b3e1043a04d59f740c456d1d3a790a2c00996a83244b80b7c9aba6f895ad761912310e8461d19224bb27bd1408280524ad99332885637b0a0b50c627897873eeb7aa16add159169b28b0b00dd9174fcf8787c26fe8d079dfe8022f1b7e31ab6c23e07649b1c2710d80aa64015d041a220edd8ea6a798f05939c2b37d053142475a1ce0e1cd3b71c4915722077d743227c36835b312eaa24fc707b75588a8ea40f42c8e9460241b40cd8cd4813f3b6db862cf96a4856eddc8102e536a137953651b259035af6810a945ad4eec04ab118eec52ba9a6edfeab7911ae389a4da2917e0932968f6a3b9b4667930724496908207534491840803c07786ba31671d7b8f038e3c3101cfadb64970d49ee5688f22873b5a5a8ba47500bd47ea304baf04544636fa966d76eb76a9cd1c08d099cfc5c23e250a356115d3b20e6ed60fec63d43c63dc6f35ea45227d3b4eb35eaf5f4f8ebd46e48a107706ae85da8ed93d7cff6d4394dd6dab1dea32f75a8cda172eba237c0f0882fdaa70a81da1770fd5e3117e5b39fe5b0a21bc09690bfc7501255ea3017571b79470c5783484e34e71c9bc4d30913f9e9223654974434c6b14edc60cc7863d6f7595f8cc3a44786abb0fcd68b21ec39ee6beb9fc8385cb703a648245bfd7090c198e4726a8d26aa34fec0aadfb400220c5f06c3b5170d1618b8f5fe59cc84e0705db06cf8083cc737e9ba12ef8b65c982c0b6aa87eb184000754851b5ecc1c0c7032cb952f020e56817d0a95e04772e4414545f982a45d889df0c73231c40d5a60d44f8fa2bf09f1df3c046952917a4431106f5066a71c91853d4612b45ef3a78397a99eebd10e38c456132082e75bca2994835c0b930507e3598d98c7d6b918ee62d785e9ffe03a403030fb31f070da252255a86531a99f050a80aab183cf61d6043d1ccf908574f8efdd08c9bf46cade3fa98638426dfa8e3141440f908a1008620b77788fc17e068111a6830137ffd08316a3204ba18c74dd1e9ae768b65c9f3ff87caff09b0cb281ce9f369194347dde1fae58b04fdee567af72d3be52ecd315c763f2a7097a4bcc838c642138622246a8839411c307e126fe60c59d4bbb75f41b890bd8c50d536c7faaab846b742d297868e40b06a96810695d508aa642cf08e660ed0c5927b1b5e16a5b9acaa104253ab8b025039082614367adf42572580197f61aa80e3a0d0430c44ef550c34549e12a637ac666c7e6ed4e8add72f04f2a51db363beeb40c37afb4835e343ff4550ca4a1e2c08a0a05f26f103c25e1f008d454174b3195f2e936f47710b9b9a6f881685b82ef34c4387e8a4fbe496741d4de2f50b71b9b778d9e94d8ecfe252de2a4f2c1f569e8acc0a48db58b94359a513b2444975", 0x1000, 0x400c040, &(0x7f0000000100)={0x9, @remote={[], 0x3}}, 0x12) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001700)=[{&(0x7f0000000200)="819eeeff5e6887416ebaec99cb72b2f553616e586107faf84b7ba2004cc95cc6891b6771a8943c6458845574077f4d5d5b63b99b", 0x34}, {&(0x7f00000002c0)="94b6d074f28d1e74c278fc8e20d401fd01b0499fb8b99523f6a58d095972874446bb88e97fca84f24d99d852ea9b87a96571d466141ab2176b6a785ebb390abbc502c2bb54e883b244e3ef844b5706e07d1f9a1db4e83a70f7959bbf", 0x5c}, {&(0x7f0000000400)="0e551a474027e7df6281f3f7eb322aa8a048f0f97efc81270234af019d8f88539abd982f48f7fa14cb6da52c68eba4395a9ca0f30fc8fdc9fb44adc97be1e67212361ea548d244ea35273b", 0x4b}, {&(0x7f0000000340)="f3e5761a577fbbb336f3a821ed4067de1a73994e90638bb0064de17a07beede5389ee2a8238243671558f54bb59560e85e9b2fe5b3e679ed65973b301b384800b796222eebb9baebfe0194e5b11209645616a943e27bfc80ad9f8026d1ea27c4f85c312eb820cf26c4855be646827b77", 0x70}, {&(0x7f00000015c0)="4b4a7b5b01a7cc32275dfc154489362bb82c0a84f2efd0c4c2fe07924a95a55f8a1da3ccc9162cbc27f0203880f021e598a8b430df3e5944646e9dfdc64cd86bd1abcbf9c974b529f2bf574681f2ec6b24d508425bd08f0669d5f45103aa3a182443e50508c51724c3f7e442d5cd224f2c14d6223d63b526f68ba9a83d03f90ed290f1eb00d10a1a0580e0a8740e75af976bca502a134c3559e637815c4988e4abf4757835a7e7185b725fafc7e03e2e26a3d9bd1e0badd4c3877ce519db85fbf1f6620cb11b34e2b8b7fde649f254915371d4ccd8f37c5e8b8a4a058fee", 0xde}, {&(0x7f00000003c0)="261de63d06aa4854b81c3a9be74e3aa00bb46306bac85286", 0x18}], 0x6}}], 0x400000000000264, 0x4000) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000080)) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x400000, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x408000, 0x0) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)='macsec0\x00', 0x5, 0xed, 0xb47}) 12:17:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x0, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:32 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c009eff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:33 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x0, 0x19, 0x1, r4}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:33 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00f0ff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2278.586685][T23609] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2278.656294][ T26] audit: type=1804 audit(1596889053.310:1410): pid=23609 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3110/file0" dev="sda1" ino=16369 res=1 errno=0 [ 2278.737760][T19773] attempt to access beyond end of device [ 2278.758869][T19773] loop4: rw=1, want=230, limit=54 [ 2278.783345][T19773] attempt to access beyond end of device [ 2278.812673][T19773] loop4: rw=1, want=62, limit=54 [ 2278.835983][ T26] audit: type=1804 audit(1596889053.340:1411): pid=23609 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3110/file0" dev="sda1" ino=16369 res=1 errno=0 12:17:34 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000001c0)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x602, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a48e0000", @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080002801000027f0c000180080001000b000000"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008800) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x1f5001, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r5, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:34 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x0, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:34 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:34 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x208e24b) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x44000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000f550e80e6dfd00000003000000b2f0bf17567059f3b7c7ce5af87ede4b011700080006ffffb9c287b68728374e"], 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000b35) [ 2279.580126][T23628] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:34 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00ffff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2279.606389][ T26] audit: type=1804 audit(1596889054.260:1412): pid=23631 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2702/file0" dev="sda1" ino=16273 res=1 errno=0 [ 2279.618534][T23633] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x2e, 0x5, 0x7, "ce18ff6da3c71f376234b94da07a08e7", "346c5c884f86b58497e7af2c1fe3307d38060b3283ec3b9a86"}, 0x2e, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 12:17:34 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = semget$private(0x0, 0x20000000102, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r3, &(0x7f0000000000)=[{0x2, 0xfe00}, {}], 0x2, 0x0) semop(r3, &(0x7f0000000080)=[{0x2, 0x7fff}], 0x1) semtimedop(r3, &(0x7f0000000000)=[{0x2, 0xfe00}, {0x1, 0x0, 0x800}], 0x2, 0x0) semop(r2, &(0x7f0000000080)=[{0x2, 0x7fff}], 0x1) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000004c0)=""/166) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet6(0x10, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000002580)=""/4096) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x20102, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)="37abd10d74de28270d08864aa09fb0d1f051dc9ad91e2263", 0x18}, {&(0x7f0000000040)="1272d38c310bcf0f5c36802990e2bc298ee753057180b0afbe3963375a9cf9e3290da1ceaaa4e399ff2583310366b81a23982699664d882d08bbde192feadd7f8b0e7cadcdedfbc73229aa564253e2fbbd97afa8c2eac3ed4cecbe6804978cbc198f", 0x62}, {&(0x7f0000000100)="5018eb99821a35f30a84006ef3dc486754403fa7dad1a37413480bb7b53eceb2bb8fd158111f9b844d40d6479cb7d6d08f3643f1a5dd035d49579e2bc249dfb25280116636ddf2869ea046d5722cfaae80b9a8f964920a77e03cf3a3bc74d5ada02f5134f0b21b0ce2c93d19cebba9e95ab5103392e6ac906573ee8231bc00cd5ab96e4376939bd05cd190c5fb7d893c0f645ecd54f738c4d2e290a86a", 0x9d}, {&(0x7f00000001c0)="92e1f5a7b6e214eed7524dd944c8b8c640bf5fd6f061fc2fd82f071285a7cb40f23ccdcaefdc45f810c1e5fd556436e466579c20f1a867a401240f0534f0ed2dc454240a7bf9e506c9cd4afe0c9ddd6b14c511ac74a03e0dc2657043090a5e8df6fb06dd0f469cc4dad0749aca7bd55133e2d18110382dee6d07bcf3dc8123e4c8fe58018caf40bcfcdafbf93a2af119207ad9ce8bf9293562c6bb3609f22278277d867674fb7515213e0f71cafc80924a860df96d2c3a1245696ca5aa3141c3291f8d9a22ca39deb3143760944db1ea388cc7890a6d165908b65df30a387443", 0xe0}, {&(0x7f00000002c0)="985f2d2cb0ec45765d00a31a91a9c69a1f9d4bffa3a03514244a2bf8b7871b2abbad163e0e744f0627ddc0f3b0da052f7da76b52629ec9b52add5dcaaffc622c042c517e95c0ed65f6d8eff764417788d12f9f94b9aef5ea9877837d6d8f376411fe1a", 0x63}, {&(0x7f0000000340)="886eb0a5e4c2dd7fa0eefd289e5cbcc02cdfbdd198cee93b2422482c9e3120c9ecf457960f7bdf3da6ba3f4047a139bdbef9823c98267935cce2f704423c94a7882a541976e7706df50714e0a5de2b9a7c650975e8f8de14e7ac0379e23b7c185d8352e6b1b50c3b14c97334dcff0ca1de579ee6ef99d1ab361f8f14a21f449745d86081f299950368c6676bc53e4d27bfcbec9f63006c7a09e5d8a8a6f16399defdf9abe1090379efdd0976", 0xac}, {&(0x7f0000001500)="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", 0x1069}, {&(0x7f0000001400)="6f050726662eac243b66ee0e5dd47ac3a34105b087576b248c0347addc279b98b6cf18c885e3ed8299918420d57b16e3d999ba89f21d90a70f0f60f825c84c6839e7f3a040581ca7b0bfe10eabb8b2ef9a8b5ba715dcdd1bf4b920f08d1b024f2656fb8d", 0x64}], 0x8}, 0x4000840) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r4, 0x0, 0x400000, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000440)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x3, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) [ 2279.828087][ T26] audit: type=1804 audit(1596889054.300:1413): pid=23631 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2702/file0" dev="sda1" ino=16273 res=1 errno=0 12:17:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:34 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x0, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2279.915002][ T26] audit: type=1804 audit(1596889054.300:1414): pid=23631 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2702/file0" dev="sda1" ino=16273 res=1 errno=0 [ 2280.021251][ T26] audit: type=1804 audit(1596889054.480:1415): pid=23639 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2703/cgroup.controllers" dev="sda1" ino=16295 res=1 errno=0 [ 2280.393919][ T26] audit: type=1804 audit(1596889055.050:1416): pid=23630 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2570/file0" dev="sda1" ino=16369 res=1 errno=0 [ 2280.807062][ T26] audit: type=1804 audit(1596889055.460:1417): pid=23661 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2570/file0" dev="sda1" ino=16369 res=1 errno=0 12:17:35 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:35 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0xb}}]}}]}, 0x44}}, 0x0) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r5, 0x2, {0x2}, 0xfe}, 0x18) close(r2) socket$inet6(0x10, 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000840)={0x14, &(0x7f0000000780)={0x0, 0x0, 0x3f, {0x3f, 0x0, "1b1e3b55d7c1fce0b8ffe891ba2b0fd1b685a932ad99644d7d0f830c4b39b13e9cd2d1ea8035833ad51f0a9e9fcb7f4d79bd862496416453a8d7efc982"}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "3351eb41", {0x3, 0x2, 0x0, 0x7f, 0x6, 0x5, 0x4d}}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fcntl$getown(r1, 0x9) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x0, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x24}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 12:17:35 executing program 1: unshare(0x18000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x20, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc4}, 0x24000800) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x40010, r2, 0x2000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) [ 2281.035172][T23678] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2281.047305][ T26] audit: type=1804 audit(1596889055.701:1418): pid=23681 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2704/cgroup.controllers" dev="sda1" ino=16100 res=1 errno=0 12:17:35 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x6652) sendfile(r2, r1, 0x0, 0x100000b35) 12:17:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x0, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2281.260262][ T26] audit: type=1804 audit(1596889055.781:1419): pid=23681 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2704/cgroup.controllers" dev="sda1" ino=16100 res=1 errno=0 12:17:36 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2281.308147][ T251] attempt to access beyond end of device [ 2281.316564][ T251] loop4: rw=1, want=230, limit=54 [ 2281.337644][ T251] attempt to access beyond end of device [ 2281.366351][ T251] loop4: rw=1, want=62, limit=54 [ 2281.405483][T23693] net_ratelimit: 22 callbacks suppressed [ 2281.405492][T23693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:36 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2281.486112][T23693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2281.505323][T23693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2281.530578][T23698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2281.573908][T23698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:36 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:36 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)={0x87, 0x75, 0x2, {0x7c, "fbf53138ab48aa999d6d00aa397f60a4b2acd79d9963eeab1f246b02a33b5b1f1f387294cfd06a17602a300b818f02cfc76a5cdfda209ca1a56c902de18818198a80b74141459eb722ef06c676c4e997e38e36537948bd2b60147db9626bf149478bfa8194233f3076a990da49786aa86c585c4b12e75421793cc8bc"}}, 0x87) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4100) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) chdir(&(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x810, r0, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x89) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x1, 0x2, 0x3, 0xf9, 0xb1, "b406bd65e85520080ce2b893921b97ac555b721daff15c1a4bd71722d9432a725d45ba44fd3cfe0eb23a7dbffabcc3a42a62653cfd0a7e1228446e6e734280", 0x15}, 0x60) io_setup(0x0, &(0x7f0000000140)=0x0) io_destroy(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400010000005deb00f486ce5af87ede4b0000000800ec3ffffffffd0500010007"], 0x24}}, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x1010, 0x464, 0x200, 0x70bd28, 0x25dfdbfb, "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", ["", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000b35) 12:17:36 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x0, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2282.013163][T23716] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2282.064441][T23720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.128755][T23720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.287559][T23720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.371908][T23726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2282.441771][T23726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:37 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000000)) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:37 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:37 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:37 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0xa30000, 0x0, 0x4, r2, 0x0, &(0x7f0000000000)={0x9a0909, 0x100, [], @value=0x6c1}}) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x7, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040014}, 0x4002890) socket(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r4, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) [ 2282.870007][T23741] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x400, 0x1, 0x3d, 0x100, r4}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r5, 0x1bff}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12:17:37 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2283.033414][T23752] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:37 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000040)={0xfffff4f1, [0x800, 0x8000000], 0x101}, 0x10) 12:17:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:37 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:37 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2283.217134][T23759] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b34) [ 2283.292060][T23759] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) sendmsg$qrtr(r4, &(0x7f00000005c0)={&(0x7f0000000100)={0x2a, 0x4, 0x4000}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000240)="9220db387e54344a9b872cc9119d1df535c0a3e1b12f76e16e5aeb2e8f6e73d595bc580ca5e954980949312e9020c341b5f76ea4033a3cffe5e9ea2b2b65bc9c2d52c0f1e26d37331aa404fa5b550934dccffb4d7f8c42fab7de99df418bb6a099aa4fa7e0f01e20e0634be858", 0x6d}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f00000002c0)="abc6a0b4747f2898b6e2fa54cd917c8f52f31fa0e1126c574585ccf5bf4002f16d0f0df91a7d85e738972da578030d6ec6a2ed7ca1795fc225c2cfc54e9dda8280d42ab1bb1c649484dead06b8113e6a1dc33c0a6106504fc498d5aeadd8c01c55867475fe4eb31427c409373d8e690eed07d5d78d8ed7f3cbdec84db4e8cfac6d17f6005232508bbd48e5529da384ac786eb9ebfb4be5fcf73c1f857824ba5916597a3c7f5b1408fc0c872ede6a5f7404348ad554c95ffa90bb4996b80dd0a6621153584aaa48bdcbe9640bad2a00241befcb0e9bc80084e85a2a3ef77d", 0xde}, {&(0x7f00000003c0)="bd4db6fce20ed861db48404c2faa30717dd27cd96e3dc218f4cc04ee16e5009dbcb83df2d2415f40b5c125d7baa1c4019db4e955f3ba7799b88dab4b654ffb447d867226df57cb03e254c25468e8bbfd2cc74615f4bda9d46af1ab84a9d45a27e793fb9472e2cfacdb497f3cb8ae8efabde0d2ce5330b1b0423b741f2f42ca297f7fef2a7086eb3d314d0be99a", 0x8d}, {&(0x7f0000000480)="4a57fe385e365b24bce412c842e147ca55c1e22213ccb2a25410d9540572d93a4cf6625d72ab20f5482da07dfddf1e7fc836424e4f426db6746be03863e778a0bad5a53149d0a93be3d316718cda172464f630fd14326b4a1c60b407a8ac4b23aa3543f222ea3870d592", 0x6a}], 0x5, &(0x7f0000001800)=[{0x20, 0x0, 0xffffffc2, "68a9b2d6ee5dcd7d1621b08b311f00"}, {0xf8, 0x116, 0xaf26, "b307548796e8c81da40db73c9bcda212d9e1da2d851cc56aab29d1d612aac94ccb782e2fe956b35eaac95803f232aaf56e340e8bfc1c6a8fe50f43ce06fa636b35e528389800e99beb989c62ff4d89bcdb31cdb33fed5e5e965a559a725452f7ebe693aa9608069cbf95bd4820600196c7cb710a260d4beb8c29527844727cbd456ef252625c16d5b0a8e9b7d1635b81d5f174721a5f762f87f3ae64fdb27fc1072fffa34fe5b2bb68fde1bcd297489f9f07058c2318b8f9803cff142fd3f4e55ef76e441b11a4da9bc81ff93b83bed508fe4a126a159cd754196319aa877543aea88155282f1012"}, {0x20, 0x115, 0x3, "5b2fee21d791487426f852a10b"}, {0x1010, 0x114, 0x665, "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"}], 0x1148, 0x2}, 0x38) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000180)={0x0, @reserved}) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)) socket$inet6(0x10, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r7 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000002980)={{0x3, 0x7, 0x6, 0x386, 0x339, 0xfff, 0x77, 0x8}, "895daf9751786c1930bfdf2dfe6075b7c9c5ddcdfcf9a9d1bc1aaa8143e7011255e31a3d42287f334b497195adfab37dcb7ca204acb536ebae2de83671fc1bf401b1c6fd23e50bf47a6bebd10e4f72e903e1950bb48facbae783a2aa475934dd863ab33a9a00c17e6e8c01adcefc447cf66709c80a1aec82bd3d5cc6cd0bf62397df0c4233487eb9b03fafeb4ea631c91a16dc53aeeadc300ac5c1524e426c7dfae8f82cb1bf87e30d22da2d8f5cb5f31173d692be4af8", [[], [], [], [], [], [], [], []]}, 0x8d7) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) connect$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x2eb, @private2, 0xff, 0x1}, 0x20) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:38 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) r3 = memfd_create(&(0x7f00000003c0)='cgroup.controllers\x00', 0x1) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0xb}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendfile(r3, r1, 0x0, 0x5) [ 2283.846066][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 2283.846081][ T26] audit: type=1804 audit(1596889058.501:1426): pid=23789 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2709/cgroup.controllers" dev="sda1" ino=15846 res=1 errno=0 [ 2284.262503][ T26] audit: type=1804 audit(1596889058.921:1427): pid=23749 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2572/file0" dev="sda1" ino=15877 res=1 errno=0 12:17:39 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[], 0x208e24b) syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000005c0)) pread64(0xffffffffffffffff, &(0x7f0000000640)=""/239, 0xef, 0xa2f9) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x4) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) vmsplice(r4, &(0x7f0000000540)=[{&(0x7f0000000140)="3614ea3eadc9f9c51a33fbf4b50441940a4c603f522f6052a0ca565ddb78b18e4aafe13f338d1383e46ccabbe29abc48269f86187702a7e436539f01342894ea84bd43e9", 0x44}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f00000001c0)="0c8515fa9483b6136ff9d0305de53d", 0xf}, {&(0x7f0000000200)="d3551532d0489865500b0c2d2a3c7ed8c4f321d95b1ffc9591e1d2b642f6e6d4e0cbef8a24749af1060caeda4032aecda83dd5a9995a4ae9452b46543c5ccbc08c1ec2f1609463ee5bc828bbbc49267bbf0bfa2ab71d1ae11287973f1dc5de8104561105078c754ba05cf9dbc0dd9f87721a6361e158a5c90f2fca348fa8ba89b6ad1ad4ae3efb9ae892fa714fb324e8609e6364bc4ff61b17e932bfcd1be586", 0xa0}, {&(0x7f00000002c0)="1fee12faa4a080d1ac4e982fc682051aa86dc67c325f5f9be10b4989d9d930abbcbfbafecfc9e40fce95a79ebb57670cff794d44ce08aa342007570f643656b336577bb243927c7e612e9f0105bdcb9502e13c2df7f7bf4af4e70eb933f17b5abf3a7ecdd01577d5166d9c6f8a92ad91d1f98b74e422955772a1a10e6a1116fa34cd347ff4b7159eb3559ab4b84a92ae18f4174255f637eba7f2a2ab25c27aa602c20aa685c7d8c5f3906e3223cf9474507e9ea30030fc234cfb65cfe3739ca175f5d7ca0175a512e85f50a9f2", 0xcd}, {&(0x7f0000000440)="037721c67693072fefc54d41773b123f616dc8a5516ad63b1f7b06c68cafd9fc3a7dfb79514aa321141f839e2a6ab8c3366851ef6b8152e3bb3c475272d691226580e7d35d3809a853220f8efd454a50c883e440beb174c2ca1bb533d2ca8d87175681f15bda5dc711c55eb2a095df4c4379b8ffb079cd00ce26b76833a43eb2a65051ac4661167d582951dc41f81c12dad0b744771876debb0874ac3aca05f1a9a8987af2ab499e7b705e4c7ed9e167eb919b42dc7457ac4eb4f7b3fb4fc78fd8f5229b56c80171ba2f", 0xca}], 0x6, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4000640fffffffd0000000800"/24], 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000b35) 12:17:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:39 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000080)=0x4) dup(r3) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x7f, @mcast2, 0x7}, 0x1c) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = dup(0xffffffffffffffff) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x1, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) 12:17:39 executing program 1: unshare(0x0) mmap(&(0x7f0000422000/0x2000)=nil, 0x2000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x4) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000000)=0xffffff81) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:39 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:39 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x140b, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}}, 0x4004000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000b35) 12:17:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x64) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) 12:17:39 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2285.145387][ T26] audit: type=1804 audit(1596889059.801:1428): pid=23828 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2711/cgroup.controllers" dev="sda1" ino=16302 res=1 errno=0 12:17:39 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r5}) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) fstatfs(r6, &(0x7f0000000180)=""/218) dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xc00200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRES16], 0xfd53) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000400000, 0x1) 12:17:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x64) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) prctl$PR_MCE_KILL_GET(0x22) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x453, 0x100, 0x70bd2d, 0x25dfdbfe, "c5335bc1c919f3c119bed3e3", ["", "", ""]}, 0x1c}}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000b35) 12:17:40 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2285.437375][ T26] audit: type=1804 audit(1596889060.091:1429): pid=23837 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3119/file0" dev="sda1" ino=16228 res=1 errno=0 12:17:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) [ 2285.596158][ T26] audit: type=1804 audit(1596889060.121:1430): pid=23839 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3119/file0" dev="sda1" ino=16228 res=1 errno=0 [ 2285.753992][ T26] audit: type=1804 audit(1596889060.131:1431): pid=23839 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3119/file0" dev="sda1" ino=16228 res=1 errno=0 [ 2285.956775][ T26] audit: type=1804 audit(1596889060.271:1432): pid=23845 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2712/cgroup.controllers" dev="sda1" ino=16288 res=1 errno=0 [ 2286.123606][ T26] audit: type=1804 audit(1596889060.351:1433): pid=23851 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2573/file0" dev="sda1" ino=16302 res=1 errno=0 [ 2286.190814][ T26] audit: type=1804 audit(1596889060.351:1434): pid=23852 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2573/file0" dev="sda1" ino=16302 res=1 errno=0 12:17:41 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:41 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x6, 0x6, 0x8, 0x7fff, '\x00', 0x3}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r1, 0x0, r3, 0x0, 0x400000, 0x0) 12:17:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x64) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f00000001c0)="11d81eb7331439aec5e4d603a45789a296978600bee8fc621dcbef28b59876cabfddb45123c71066bb77abcd0ad171c6b0e13d42351ac9", &(0x7f0000000200)=""/247, 0x4}, 0x20) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x7, 0xff}, {0x5, 0x6}]}, 0x14, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007065deb00f486ce5af87ede4b00000008000640fffffffd0500010007"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000b35) 12:17:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, 0x0, 0x0) 12:17:41 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x8000, 0x0) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, &(0x7f0000000200)) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r3, 0x301, 0x0, 0x0, {0xd}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x1c}, 0x1, 0x2000000}, 0x20004041) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4001) r5 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r6, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) [ 2286.434200][T23869] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:41 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2286.518433][T23875] net_ratelimit: 30 callbacks suppressed [ 2286.518442][T23875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2286.533267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2286.568923][ T26] audit: type=1804 audit(1596889061.221:1435): pid=23872 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir050018143/syzkaller.dZrpun/2713/cgroup.controllers" dev="sda1" ino=16275 res=1 errno=0 12:17:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, 0x0, 0x0) 12:17:41 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x800, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x1890c0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000180)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) r7 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f00000001c0)={0x84, 0xa, [], [@ra={0x5, 0x2, 0x8}, @enc_lim={0x4, 0x1, 0x1f}, @ra={0x5, 0x2, 0xff}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x38, {0x0, 0xc, 0x1, 0x9, [0x2e0, 0x5, 0x7, 0xffffffffffffffc1, 0xff, 0x7ff]}}, @jumbo={0xc2, 0x4, 0x401}]}, 0x60) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 12:17:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2286.809544][T20218] attempt to access beyond end of device [ 2286.849969][T20218] loop4: rw=1, want=230, limit=54 12:17:41 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000f0", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2286.877481][T20218] attempt to access beyond end of device [ 2286.895883][T20218] loop4: rw=1, want=62, limit=54 12:17:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f90000082505a8a40700000000010902"], 0x0) 12:17:41 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x440101, 0x12b, 0xa}, 0x18) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100)=0x7, 0x4) socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2286.993591][T23896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:17:41 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000002", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2287.112864][T23896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2287.121762][T23910] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2287.165767][T23896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2287.301376][T23902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2287.310971][T23902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2287.339246][T23917] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2287.351204][ T2580] usb 1-1: new high-speed USB device number 90 using dummy_hcd 12:17:42 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000003", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:42 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2287.505086][T23923] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2287.523523][T23926] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2287.601325][ T2580] usb 1-1: Using ep0 maxpacket: 8 [ 2287.722812][ T2580] usb 1-1: config 0 has no interfaces? [ 2287.730722][ T2580] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2287.747774][ T2580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.758995][ T2580] usb 1-1: config 0 descriptor?? [ 2287.857219][ T251] attempt to access beyond end of device [ 2287.867640][ T251] loop4: rw=1, want=230, limit=54 [ 2287.885397][ T251] attempt to access beyond end of device [ 2287.907800][ T251] loop4: rw=1, want=62, limit=54 [ 2288.014676][ T2580] usb 1-1: USB disconnect, device number 90 12:17:42 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001040)={{0x0, 0x0, 0x80, {0xd000, 0x70e76aad29de4c49}}, "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", "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:42 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000004", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, 0x0, 0x0) 12:17:42 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0xc620c1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f00000002c0)=0x7) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}, {&(0x7f0000000180)="234115111c296f18c51b20f9967eb8be88c519b7764d1fb9dbe497c710fdea83ab315140b289edb01622a3daf6d5b5706934539d43432c963875ed8741cdd656869e884257bcdcc1f218c82b86f81bfda93a3fccf3be9408cbb52b7bf1544e147256b1a7b8019d76a52c2dbcaad9", 0x6e}, {&(0x7f0000000240)="52c1380ff6be7f1632895a9af244df67cc1c406e6f4b106c46bfcb29d9a8c6caf31450845b3660ae3ce93e58e6e1252f401f553eaa210b450334fdb87f5bb4d40a16178786b09381a450897f93835e817cadf4effdcbc9c98855a041e458", 0x5e}], 0x3}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={0x0, 0xe764}, &(0x7f0000000380)=0x8) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af000314000000000000000081ffffff00000000000005", 0x1d, 0x1c0}]) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r8, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r8, 0x80, 0x4, [0x2, 0x0, 0x4, 0xffff]}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x0, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:42 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000005", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2288.217078][T23950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2288.225645][T23950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2288.234107][T23950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2288.272762][T23948] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2288.807288][ T2580] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2289.051171][ T2580] usb 1-1: Using ep0 maxpacket: 8 [ 2289.171759][ T2580] usb 1-1: config 0 has no interfaces? [ 2289.177648][ T2580] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 2289.199754][ T2580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2289.224878][ T2580] usb 1-1: config 0 descriptor?? 12:17:44 executing program 0: 12:17:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x58) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:44 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x4, 0x1, 0x1}}], 0x20) shmget(0x3, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000080)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$FIOCLEX(r5, 0x5451) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:44 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\b', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:44 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'team_slave_1\x00', {'geneve0\x00'}, 0x3}) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x810, r1, 0xffffd000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) [ 2289.511107][ T2580] usb 1-1: USB disconnect, device number 91 [ 2289.641353][T23977] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:44 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\t', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:44 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000e", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:44 executing program 0: 12:17:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x58) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:44 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) [ 2289.932687][T19767] attempt to access beyond end of device [ 2289.939152][T19767] loop4: rw=1, want=230, limit=54 12:17:44 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000f", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:44 executing program 0: [ 2289.991155][T19767] attempt to access beyond end of device [ 2289.996930][T19767] loop4: rw=1, want=62, limit=54 12:17:44 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) sendmsg$nfc_llcp(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x27, 0x0, 0x1, 0x2, 0x0, 0x5, "472e9300bfcab2f8a8c8b31fdb7f48da8d8f8d3fe78bdecf9d9f0c3ffde2465be931378e3e92490dc47ac89b288ac0d694714a30d660fb0f74fa2d1b65e5c4", 0x1a}, 0x60, &(0x7f0000000340)=[{&(0x7f0000000080)="5757cfe1240d892df7c5421b47768a7ef05eb23411dea3d0da5485153a2f45f5fbbc59fa3325e6ab12974eda85d68b61b2234536d3b295936335cb03225e95", 0x3f}, {&(0x7f0000000100)}, {&(0x7f0000000180)="bf8f6b3130ab2152c637f4670779ae2ad2917a0e26299cbb07a87fcbf1f6a7a9292310a1bea8ecd8cc61bc3d3d89df6352956ae4fc831317", 0x38}, {&(0x7f00000001c0)="35fef87fc66049dc6bc38a8594beda3081af908209fa2eae61ffb6f7f14b0e40884e208e59229eaa5a42d262ae0735a4bc6add1ee4ad55d15b014e418f9fcf1bf7648eed698e22cae87e703ff6b6047fd22a511ab7b76d7234235a42fc2872f39cb2060907f97e", 0x67}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000240)="ba3b6edbd69c8b16f4730054f0588e5fbe582bf362905c851eac80f9f0efe8e69e82995a67985308952b7524475f39b94ea5ba4936f631e4b3465b9fa3eb55f6e3225671bae7dc7dd780ba85948b4d533e4efe61d04b2c63b0b8d681d1161d4111c0e31fdb778d643ec33cf861caab6b01d258d544150337276311cdedde4adc455ad22c86778ba4c06bb37c81bd115fc020d15ab9d7aae31f8689db0f5523d2cb3fb53ab047e8d8f8a7c240bc1d8b234a512a18a8cd06ba56c3de18ea8b0d2f892e3255bdb8a98c224691fc0bc2cfa36975d11500d3720b0496d98c314ff24fc8da44a3ee583185762e49455673f62982d8383b6741e8756b34c3a2fdff", 0xfe}], 0x6, &(0x7f00000003c0)={0x68, 0x111, 0xfff, "5d0e7edcaffc6b82898c8fc67b1531d91578b0386acb16682e9603ccc285e4e9bcdeb8e4d04f368ba533b112d6b884c102c9396df14e0cd6dccab77f644003b6bb8f1739edb50b3a523cb9f67661b5bff8"}, 0x68, 0x8000}, 0x20000000) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:44 executing program 0: 12:17:44 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00`', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2290.220589][T24007] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2290.338246][T24016] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:45 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:17:45 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000f0", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x58) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x6, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd6) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffe3d}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x8000) 12:17:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$instantiate_iov(0x14, r0, &(0x7f0000005080)=[{&(0x7f0000005640)="10fcdc5dd1aca526b14200cb966f500950e564e6d5e0ae9eebc741832e366571b82a5494e09728539c0cc7b08e2067318e93dc82534179eff0e8160c1a44b278445c0fc6600310478bbc380108655cd31eab83472017a646f6a9f274526369ed90dc2718e657f841c95bc283ad86bf80ed810bf47108917c4b93fd464c9f21a770feba8511a911ae4f597baf48a2bad7eb674940256f168ced7bfb35481241a46d2f151b1bb8e368e88c3895689a23c4c39c66ccfed7bcacd888e7e5a2847d0810d62a47b2363dd0f25dcad5472e948b1d2029671bf83f06f0958ab1", 0xdc}, {&(0x7f0000005740)="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", 0x1000}, {&(0x7f0000006740)="d3e36083be5bf93d2f14ac67fc176723cc8ca983fa29a33b192c867bd238f0b68107b75ee3f39bb997c7784859dca9c985b6b587dc75a55718ad5cccced7de3b1e25ba4f60c31ea9829beae3535f2af45b7ed87935e0879365f00c1554159668e27969c4345bf4720c6b9041c282f40e26273e65a21bd89885a6708b0e396b885f06dcaa805c11c3883ac39413fffa76c65f5e7b58d0c5e2a7d08c1d92ccd0adcd00c6deb385276adff6a9c0e3aa6f61c0ac088950d70579c4a564f71aa0a098d37340793c8b0ab570d03c89cdf0", 0xce}], 0x3, 0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) recvmmsg(r2, &(0x7f0000005380)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000180)=""/165, 0xa5}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/18, 0x12}], 0xa, &(0x7f0000000600)=""/89, 0x59}, 0xfffffff9}, {{&(0x7f0000000680)=@sco, 0x80, &(0x7f0000000940)=[{&(0x7f0000000700)=""/199, 0xc7}, {&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)=""/118, 0x76}], 0x3}, 0x7fff}, {{&(0x7f0000000980)=@tipc, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x1, &(0x7f0000000b40)=""/205, 0xcd}}, {{&(0x7f0000000c40)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000cc0)=""/223, 0xdf}, {&(0x7f0000000dc0)=""/166, 0xa6}, {&(0x7f0000000e80)=""/92, 0x5c}, {&(0x7f0000000f00)=""/244, 0xf4}, {&(0x7f0000001040)=""/31, 0x1f}, {&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/152, 0x98}, {&(0x7f0000001240)=""/204, 0xcc}], 0x8, &(0x7f00000013c0)=""/79, 0x4f}, 0x3}, {{&(0x7f0000001440)=@nfc_llcp, 0x80, &(0x7f0000002500)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)}], 0x2, &(0x7f0000002540)=""/251, 0xfb}, 0x8000}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002640)}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/35, 0x23}, {&(0x7f00000036c0)=""/60, 0x3c}, {&(0x7f0000003700)=""/156, 0x9c}, {&(0x7f00000037c0)=""/133, 0x85}, {&(0x7f0000003880)=""/96, 0x60}], 0x7, &(0x7f0000003980)=""/22, 0x16}, 0x80}, {{&(0x7f00000039c0)=@nfc_llcp, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003a40)=""/4, 0x4}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/221, 0xdd}, {&(0x7f0000004b80)=""/236, 0xec}], 0x4, &(0x7f0000004cc0)=""/50, 0x32}, 0xfb}, {{&(0x7f0000004d00)=@ax25={{0x3, @rose}, [@bcast, @default, @rose, @null, @rose, @default, @remote, @netrom]}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004d80)=""/85, 0x55}, {&(0x7f0000004e00)=""/226, 0xe2}, {&(0x7f0000004f00)=""/34, 0x22}, {&(0x7f0000004f40)=""/8, 0x8}, {&(0x7f0000004f80)=""/99, 0x63}], 0x5, &(0x7f0000005080)}, 0x1f}, {{&(0x7f00000050c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000005300)=[{&(0x7f0000005140)=""/199, 0xc7}, {&(0x7f0000005240)=""/88, 0x58}, {&(0x7f00000052c0)}], 0x3, &(0x7f0000005340)=""/13, 0xd}, 0x401}], 0x9, 0x12160, &(0x7f00000055c0)={0x0, 0x3938700}) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000005600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000052c0)={0x0, 0x1, 0x6}, 0x8) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000002640)={0x1010000, 0x6, 0xc69b}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000024c0)={0xaa, 0xd}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:45 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x80, 0x0}}], 0x1, 0x0) 12:17:45 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:45 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x8b, @empty, 0x8b54}, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, 0x200, [0x7fffffff, 0x3, 0x6e, 0xff90, 0x7f, 0x5, 0x2, 0x4]}, 0x5c) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:46 executing program 0: 12:17:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:46 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:46 executing program 0: [ 2291.474254][T24046] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x0, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2291.553604][T20218] attempt to access beyond end of device [ 2291.560281][T20218] loop4: rw=1, want=230, limit=54 [ 2291.583774][T24050] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:46 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x6, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x100) sendto$inet(r6, &(0x7f0000000040)="00a5772c4ffb61d3002db5bd99ba3fca6b4d2734208bcdfe3d9fd3bb", 0x1c, 0x24000044, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x8, 0x1, 0xff, 0x8, 0x70b, 0x2}, 0x20) r8 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r8, 0xc0905664, 0x0) ioctl$MON_IOCT_RING_SIZE(r8, 0x9204, 0x29ab2) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2291.616624][T20218] attempt to access beyond end of device [ 2291.648878][T20218] loop4: rw=1, want=62, limit=54 12:17:46 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:46 executing program 0: [ 2291.776448][ T26] audit: type=1804 audit(1596889066.432:1436): pid=24058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3130/file0" dev="sda1" ino=15860 res=1 errno=0 [ 2291.910073][ T26] audit: type=1804 audit(1596889066.462:1437): pid=24058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3130/file0" dev="sda1" ino=15860 res=1 errno=0 [ 2291.950942][ T26] audit: type=1804 audit(1596889066.532:1438): pid=24058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3130/file0" dev="sda1" ino=15860 res=1 errno=0 [ 2292.021666][ T26] audit: type=1804 audit(1596889066.532:1439): pid=24058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3130/file0" dev="sda1" ino=15860 res=1 errno=0 [ 2292.417488][T19773] attempt to access beyond end of device [ 2292.431413][T19773] loop4: rw=1, want=230, limit=54 [ 2292.438030][T19773] attempt to access beyond end of device [ 2292.501712][T19773] loop4: rw=1, want=62, limit=54 12:17:47 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:47 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:47 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:47 executing program 0: 12:17:47 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c}, 0x1c}}, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x0, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:47 executing program 0: [ 2292.953451][T24083] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:47 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000c0", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:47 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x0, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:47 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:47 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:47 executing program 0: 12:17:48 executing program 0: 12:17:48 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00_', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2293.328816][T24100] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:48 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) [ 2293.406303][T24105] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:48 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) setrlimit(0x1, &(0x7f0000000000)={0x952, 0xfff}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) 12:17:48 executing program 0: 12:17:48 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:48 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:48 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001300290a000000000000000007004b98640000", @ANYRES32=r2, @ANYBLOB="00000000000000000c000c0480000000006f000093b7ea98dd0bbd2e567ecdb0aa032c852a639d917baa9974af5cc7c627c3039e671d7c5b18c5dbeae6d388c7c823c012a084ecb9a38cf12cf8d796054143c3937f0b857c368e52e0d74bcfbd8471f870ee4ddc5f08d5391e97b13e05f1074e2b5aaa2a5486c91acd576a3e4525c7"], 0x2c}}, 0x0) socket(0xa, 0x1, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r5, 0x0) r6 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x8b) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffd8cd4084, r7}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) [ 2294.192031][T24126] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:48 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00001f", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:48 executing program 0: 12:17:49 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:49 executing program 2: r0 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000000)=0x610e) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r1, 0x0, r3, 0x0, 0x400000, 0x0) 12:17:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:49 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:49 executing program 0: [ 2294.521728][T24141] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:49 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000e", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2294.586225][T24146] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:49 executing program 0: 12:17:49 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:49 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='\xbe^-@..^\x00', 0x8) close(r2) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x2000)=nil) socket$inet6(0x10, 0x800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2809302000000030b4302dc130bb9d5e3f0752ee2377f958c89391104bfaee656a666c8273789493418e960a294bf0eaf1f90707e5b98133998528dc3bd2d51f0ae09513ede5489e4822a04c62b77b94d84a6a745e4a4d68e23ff61c4765880538033ad2e49bf9fe229244048d35033be8b9eeea6cf3e588c598bb99d8a148a6594d04fdc1f6adf52229d1d8294676badbbd82e8d94ec65a191b124799e34", 0xac}], 0x1}, 0x4c010) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:50 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:50 executing program 0: 12:17:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x0, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:50 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x131) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000100)) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) accept4$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc420010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf250800000020000180140002007767320000000000000000000000000008000100", @ANYRES32=r6, @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x4010810}, 0x20000000) close(r2) socket$inet6(0x10, 0x2, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x5, 0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000180)) 12:17:50 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:50 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) getsockname(r2, &(0x7f0000000080)=@l2tp, &(0x7f0000000000)=0x80) socket(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x100010, r3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:50 executing program 0: 12:17:50 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:50 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2a, 0x0, 0x4000}}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:50 executing program 0: 12:17:50 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:50 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2295.801253][T24191] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:50 executing program 0: 12:17:50 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@decrefs], 0x0, 0x0, 0x0}) 12:17:50 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000ff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:50 executing program 0: 12:17:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0xb}}]}}]}, 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0xb}}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6884020a3a76"}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x3}}]}, 0x48}}, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r5, 0xc0046d00, &(0x7f0000000000)=0x800) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:51 executing program 0: 12:17:51 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 12:17:51 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) [ 2296.908558][T24226] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:51 executing program 0: 12:17:51 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 12:17:51 executing program 0: 12:17:51 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x5, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:51 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:52 executing program 0: [ 2297.349333][T24251] binder: 24245:24251 ioctl c0306201 0 returned -14 12:17:52 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000000)={0x64d5, 0x9, @name="5d20b2c953deb32d06c456d8ed94893dc040a9ca4afdcbb75baa4edfe7d6e6ae"}) socket$inet6(0x10, 0x2, 0x5) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0xb}}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', r8, 0x80, 0x8000, 0x88, 0x241, {{0x17, 0x4, 0x2, 0x9, 0x5c, 0x66, 0x0, 0x0, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x23, 0xb7, [@loopback, @private=0xa010101, @private=0xa010102, @remote, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}, @broadcast]}, @noop, @lsrr={0x83, 0x23, 0xbb, [@broadcast, @remote, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @local]}]}}}}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:52 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 2297.532386][ T251] attempt to access beyond end of device [ 2297.538273][ T251] loop4: rw=1, want=230, limit=54 [ 2297.606093][ T251] attempt to access beyond end of device [ 2297.629723][ T251] loop4: rw=1, want=62, limit=54 [ 2297.706268][T24264] binder: 24258:24264 ioctl c0306201 0 returned -14 12:17:53 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x18a00) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:53 executing program 0: 12:17:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x64) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:53 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0x13, "e188b4a92e7693ab"}, 0xa, 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:53 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2298.689050][T24281] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:53 executing program 0: 12:17:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:17:53 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:53 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r6 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x401) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:53 executing program 0: 12:17:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x64) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2299.037705][T20218] attempt to access beyond end of device [ 2299.044811][T20218] loop4: rw=1, want=230, limit=54 [ 2299.068520][T20218] attempt to access beyond end of device [ 2299.103183][T24298] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2299.118774][T20218] loop4: rw=1, want=62, limit=54 [ 2299.213656][ T26] audit: type=1804 audit(1596889073.872:1440): pid=24302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3142/file0" dev="sda1" ino=16269 res=1 errno=0 [ 2299.220543][T24302] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:54 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:54 executing program 0: 12:17:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:17:54 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x4800, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) ioctl$CHAR_RAW_RAGET(r7, 0x1263, &(0x7f0000000200)) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x40800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x64) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:54 executing program 1: unshare(0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x30, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x60000) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r4, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:54 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x8, 0x2], 0x0, 0x0}, 0x54, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) socket$unix(0x1, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @dev={[], 0xa9}}, 0x14) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4ae480, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) sendfile(r3, r4, 0x0, 0x12000) [ 2299.943663][ T26] audit: type=1804 audit(1596889074.602:1441): pid=24321 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3143/file0" dev="sda1" ino=16290 res=1 errno=0 12:17:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) [ 2299.994213][T24321] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2300.090161][ T26] audit: type=1804 audit(1596889074.742:1442): pid=24321 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3143/file0" dev="sda1" ino=16290 res=1 errno=0 12:17:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:54 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r6], 0xfd53) r7 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:54 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:55 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653078000053c27bc32760036", 0xd}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 12:17:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 12:17:55 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:55 executing program 0: [ 2300.635518][T24356] ptrace attach of "/root/syz-executor.0"[24354] was attempted by "/root/syz-executor.0"[24356] 12:17:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:55 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x0, 0x800, 0xffffffff}, 0x20) 12:17:55 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 12:17:55 executing program 0: 12:17:55 executing program 0: [ 2300.952919][ T26] audit: type=1804 audit(1596889075.612:1443): pid=24341 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3144/file0" dev="sda1" ino=16293 res=1 errno=0 12:17:56 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$isdn(0x22, 0x3, 0x26) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:56 executing program 0: 12:17:56 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:56 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x4a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:17:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan0\x00'}) 12:17:56 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000ff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2301.503083][T24391] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2301.578306][T24392] ptrace attach of "/root/syz-executor.5"[24390] was attempted by "/root/syz-executor.5"[24392] [ 2301.617819][T24398] 8021q: VLANs not supported on ipvlan0 [ 2301.681816][T24402] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:56 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x208001) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0xc6, 0x0) 12:17:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00'}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x4, 0x1, 0x6, 0xfffffffe, 0x13, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x10, 0x0, 0xb1ef, 0x1680cae1}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x0, 0x2], 0x0, 0x0}, 0x54, r6}) 12:17:56 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:56 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000000)={0x4, 0x5}) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:56 executing program 1: unshare(0x0) r0 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) mmap(&(0x7f0000a95000/0x4000)=nil, 0x4000, 0x8, 0x40010, r1, 0x374f1000) r2 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000080)={0x1, r4}) socket(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r5, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000000)) [ 2302.114526][T24415] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:56 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000ff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2302.242423][ T26] audit: type=1804 audit(1596889076.902:1444): pid=24424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2585/file0" dev="sda1" ino=16269 res=1 errno=0 12:17:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00'}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="ff009b070000000000000000000000000000000000008906"], 0xfdef) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x5c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', r4, 0x4, 0x1, 0x6, 0xfffffffe, 0x13, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x10, 0x0, 0xb1ef, 0x1680cae1}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8936, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x0, 0x2], 0x0, 0x0}, 0x54, r6}) [ 2302.310656][T24429] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:57 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653078000053c27bc3276003639405cb4aed12f0000006edc00278dcff47d01000080ca99f847605e03127172c61d79cf4dd76745a4298063acf2678cef3380b9ea5c364f0e78fc064d8a3a9a14e7b2738e4907dc4e4c672d0f00c2f009b6d2a78423354046e32f08cac9559d76305fe1fcf8c0813d97f42f19414eaedd9d2ae5a27c579b20b4796bf296a9c169caa8e7414097844aa0933a898858a6a8ba7f1f6f911b1e0debe2fd4c2be9d187fad0bc1bbedc3a19f51dcd4415a08fd2df4dba41b9cce6e1e903908de11c0c9a6ebd3b117d35c54d3ab735d6e975ecce7aa94bcb571963c26282f06d54e00892a91dff033b55", 0xf4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 12:17:57 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r8, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r8, @in={{0x2, 0x4e22, @multicast1}}, 0x9, 0x3ff, 0x8001, 0x6, 0x5c, 0x4, 0x80}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000180)={r9, 0x8, 0x60}, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:57 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2302.518074][T24438] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:57 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00007f", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:57 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x208001) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0xc6, 0x0) [ 2302.599188][T24448] ptrace attach of "/root/syz-executor.5"[24446] was attempted by "/root/syz-executor.5"[24448] 12:17:57 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000040)="6653070000053c27bc3376003239405cb4ae24f12f0000001500", 0x1a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 12:17:57 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1b9b073b0031000000000043"], 0x78) [ 2302.702085][T24454] ptrace attach of "/root/syz-executor.0"[24453] was attempted by "/root/syz-executor.0"[24454] 12:17:57 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x3, 0x436, 0x200, 0x8}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) truncate(&(0x7f0000000080)='./file0\x00', 0x100000001) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000340)=[{&(0x7f0000000100)="6e937c2cec4e713e733773ccd71c0a71836ffdaa8c", 0x15}, {&(0x7f0000000380)="595b742addd2d80fe439b38f3fbd7edcb1ad7a6ec5a24f1b8a97e274e8bd67af21e7000000000000171637bc6fb1841318d74311b8684e685f38fb92369fbe21bfe9e4e86ddc4b4698e22c71049d5abb87e77d6a5be3abc57f3d1e2b8da76927ed73fec6c16ee0359163da5b94c6b8ca19e3a480daecd4960d2b36be94a4ebeb4bcfa8c1975c3102c1e1dfcbd9101e906ad8f48c8999a2a7c749dc6f761ec78b1ac4991e6872e2a46bfa88dd9bd69b90be6fd0011d8d94729fc9e463940840966573509f5a595f61c4fd20f5a649e9e99771953d335fed42a0ce4bd738ad9abb1b5b115e76361ba2ee7f75a1682aba977f6f1043252b3571395f08daacf06914f7c9cd3ca685c7dc04fd6f3f45b52837091da1a67c51807a9eb3f528899cd65cb440b157", 0xfc}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000500)="4ba46152460390941b35a8b6af11f0315a45055e4e87da1aa66d7726ddb8e9c42e2df1184625afc99e72b61962f8d58c7eb15b27f3c42cedaa5fd3b86ba647b9c0b1c6d01c54d1c3d54b3beaa97e32f3df494df1f1ba8808cc8d0925db77344161227cdb6da3ccecd63b7b7b02d37004a5576b851aea37f0e2107867b9cd2da4e51e09fdfb5211b5c8d6aa7aadb20f08a328a0118fc649dfef236853d781d908d7947c3c132cb5007aa6dd036bd1efd9f8464510765c76a34b58f47178975a0fe8f4f335da5a1f70b4b34c5a8e4f6dc6eb0a8265c77cd3c7535d2ce6f5835905c7d434229ab297b87df4a9bada2649c8f702442ae553764aa21f87c52e37ee6026792d546b4dcf40db408a8ab1dd79114fe7351fc11704ae21b0a74880937585399bdc6ad19e27347406ce3c24feae8f0d17168889dc63e3288cb456e8adcf0e3a186c77830523a223c501c138e147afe47b4945402c97f7ef0bbd7549b159ff9ad91c6a4483a983bd98315c2899611b950afafa724a7b09d7dafa0d3d4a527a791bc9dd2a33bac85df47417e3b7b11bef22b73f44d974fcda44ecad7fb442e71621e2e8cec176cb789190e1de8cee1f8859a6aade2230196c116ffee32fb9c867ccb3b4d9a19c3800287adf2934bf1169adb37671b52163d1174ac6ad26411153e5c2049cef03a8c647fcb32ec7ba2f6043fd7cef2d50f24fe87d4e38af8136517f9023362dbb2379935a00f4af78792c6de089ad1a92a257a36a009ce302cac99bcb0c73ae7e8e44fb7af4e2f1b65dce1166e541f2bee9dc6d0015ba13e49142cc2475714ae4e0c2267010d5d2b582af74bf20285a6f8088427c555dae5a925445cd9049d1c1b32c98c26c863ae2b445a0386af21e9e50f135be0f14115e8f488622412021131a7c8df45c0513d7d12cd542bda25620652731ade0bd2a7171cdb6f3d393169d4a48162e952bb2a721306312d4a356c9425882b76c5913ce4f410535134dab0e0655e88d72d153335f20d251ce9e11917e49799033ad57d9a43073abaec9826ae93a7c91f778bd2fe43af4f752cbe6cff3cc2e9bd33407cf92c3dd7f10a9a52dcb982debe81f27897a7d968f077fadd0067c6d04d3974ebe606e20a2bae3cc8b4755a3fdf84f0aa9edd54b0092884776d1eb70e270773bf77d3102340097d8aa3bdd8627db3b04dcdc9386f70ac8e794870049eb9e47c332dbfbddc82a6df79b4ac013cd2d32d6c0a97989658fa74e7fe364d3e14300fcc01c50210b090819531256c071e30ec2a16ba75f0fac1d83043ca631e4dc09d52112ea994cc6c2c5f9442a29f2e5c104da55ed16fb33002b0d8d56058b784685b142fb4cce57584cda87db8adedf05ba2f635a3bffa75ec9b5e6e14ff6cabd24cead7ae9af7c0159daef73be9073eb5f73c9c7e7b2f0883d7e452d262911acbba445051ddcc51341b147855c10795f232757ec69875e33d9be9add082bce18d8f0f047304b69a91be5d12ff74d2e075660280e2296137005305c5e9f69ab1f901cfcd397509d828cef3c18e7231037326a57c12f7f242de8cafa235ad4608bbd3a2d5b24aa2d37840b0e1a5b49df4ebf3c5f48dc6675450099f2ee2b136a1034a189444595d83e26dcc3dedfc8c334b75a8e2eb6064cfcc702308056d62cf6f354e438ccd480f60264c7621641b9aebf57d186a9b9742132458287a67e50931b972e9bbaa74505c1df3926187112b3293af7e333b6c075f69ccbbc999af2f1634a77ea7d7d1fc972e33173d5acfcde95f6fa82bda751d222be0220209e4d9e5cd1417fbabb45062688c75c5cbc55c354dcd4a818f2801cdd840aca3dc8698d2d72685c227dd50941e013836a7bfd224b3810c398ffe97b3a9a2e4abf2bfb85e1fa909bb9d15f96dbee6ad8f097e2684e7557f0cae91b83517fbc6bb3bb581806c42e34414028c95bb463270e43f4871438b7c4eb2c29db088a887c1e2fe12d0d1fab7feb964a42d047ef95eb246374ba2276d444d81e20b4f7c834c14f3fff2b348b9162b69e25a602e0b6a8311231d2cfe86b2fd79d688b8965114db5887ce19a53ae4ed4276cbc7c069654d4b12654c511b8014a4e9384a5430d075b720e73468a18ef3dbfd9c909f38c2e7da8b593cff1d7f9299aa3ceaf896358b2b6d1ffa7e093cf836a17cc66e92b1306605278b2be587aeebb7013b4decce7d503da7597d821776f4acdf6645f95a81dce24bc91cda45bcadc9ebf27c16379353921f0f9b2fa73150143552a0decdb33165af9aac2784ea9599d15211c910102439d0c937a75cd90fc5d359904187c2d1a7b3f5eb098bc9f730188f6916b52dd5bcd77057fe80f55d545c0d9b97fc94d37378e352ecd16ff074f722da68eff9743f491b6f50d24e25aaa10f10faf57d187726a83f6bb1086e487efa1263b8b08bdd06c002a0d155d0e21739aa3c15b2d0448b941e32f14c4192705ae6a32a9bee5e6c7dd09564ed988756f488423d5cb9029680274401e3b3987dcf9894a625b739b0a7707beab7a209c079511a0a411617529d02e8a4d44a49c5c4eee8faa639a7ceaa74d79ffc0f37d4f4ddaf73ef9882d156c7a0cd837e54169c221f92f9b0e326e347b4a217b934f82f09b970f7513ce18eb7b6fa1c4e82302574a2e8b29d2732b3a297c3393af8026dc7d794e56c6987ae13c93674dacd9e13f6341e1e5ba48eea8bad31691a9b5e19c79fce74fffa70588c818e7f9d010dfee2479abc4d318311fd1e79e7696e23edd059726e1ff9269e9a7c0f63f65ac29cc5cc36bafea8d3699b837fc394f403b52c8357e7f90d10824c516393e3817abfb16c2f03c5b116864c1cec65f06ea6ff54456560d339f083eb24e2f6dfa3c6c387c457215cbbb5ef494d6f7bd60e089bcaf317c758c466af2e2369548e2ac256da75f562d8e420f7d7e7c5e74b0601863e442645b8aee41fc604ec34e537823935be252b008fc73a08469499811ae4a5d4e5076d851a101600b7574bc1e62fe0c53f349c5471276f87e4bf30bdbb48aeb835e34eb7c4b26e992a46bef04c33404a9644e51313c2f5202b402b21aa23e41d40c5eaf0a76d9bb4d169df23068dda3fff3312071f0a0b7833b2de93d253aecdbffadc21fccc3f3971f91f814ab045a6e079a6a7f0c26e45e7451f39d9a452ee4d8f0852a29ece73174d7703ad836cdbe1b13d94c08d6870cd46b0f84f8f1657bdf102773e9479632d7ceceae7817168343ed9a01c556fe4bd63089170a2d7ce7d417fa87363f54b0a45cdc445081b0f73a393945f84695fff794a4695546c92e028d5a754784f2ad9340789bb60f83968e01494152cc4b53af284cc3c3c1a7b631ade2da71fee8e0a3a5821feda8d3a8b1acea735b19091fb6ef945826f810acf805ab3b71e3a483cc8f97a73803787b2dc1cf6767f3736292645f6d54110efbe75ed77e47a9aa5edaebe7f38464603b04a86de278aa55066f913041b259783b0f6845ef89db1c272400150c3f7d851b662980364a07ed70cbb341783a8781d4bc5e6002f9ed6377c5c2fdcd7fdaa970c5beaace19d1a6ba470680251c74b0caa66a128151909fa0f4ce3b1f63e715df27a4e340a508197ed14e64b1ed561dadaa25ed2c6baefdbf4216963541d68a4053830188becff78cacddac1c80a34ae576baca0a4d1d0bab3936ccbc15515c8c1e3ee86bddac45c174f347620bab54daed9c35e94a907e99821c228830fb3eec2946789e386692bed8610662a9a9580524263830de4dfc40b4ffd1417d939f6f022593ed4aee6221e2403ff8c09ce8bbdf894cbea96353c226e0b8d890e76cf04e9867d3f2e72e13a772fc963de2b3b0b1dcf90fe4d9b6ca7a2bb09240bfad6c85d5b05865825a671a30dcc9972a00e35051a5cb5c349991dcbbb705ad3e31e6230e909c324cef177977dca00cc0afb6ce75c821a8d41fbd573a37e903c074a3fcc6dc02210913dacddd0b615a50c2158de9c4af0399a0380fca6210b547c4254715a4f9534f0c721036b3317b70bb6330d9ae2b74a5016c631d1885524e6265f85006d2e1d529e01748bac5ad7bcd3c9c46b2d2b374df1c9042a2c07a212f97c8879dfa3f49dc54ca0c332db6ace3120423ceaede8d17371bb4a556e459a1933f5e6b3177734df3d45968268747c1a1fd5c9bdb713d9bf6625adcf608433376bd29ca9e8af4b702eb72a37c99379e9d9e3173d9d2dac8d1b92a91e93e118a645c9c505528edf86cb90f83d68a506ba5713010213b090526f6b2d815cd0fa52ea51fb90cbecf972bf63c280c16bc3a1844fa8cd745dcaaca02616b61056cfbb45e3c5741ccfddb8e4e887cea427bfb840c41b565dd3e3038dae3ea4bdfdf6b293f0d1f0eb6f10a6bec51429c98361c8183a8189ee6b6c6d2340e03320c25e08121dba7c7fd1a604873e44235fa031808d00bd1576280751eaf52681eacc35af4e17f8657dbccf2b16af4f38f1697cedabdb5b409a93d091e6b6042750340ec369606ab8c7ed619c415c8d026fa2e3f184d0969b94e831f872aa0157e78e4d3e0e0e5c87988b6fe0fe9a9bde7a15c1e2013f213152e088d391e0efbd377d724c7e317cfab3f6498a032bf8c3a939617ae8a95cd2fa3242dac6b8a50016a2ac06ecb051e5b109e2be76736ab98b1b5cb85b7f1dd62701192bd0caf14b9f382ad88b1acce7ebe73f0523dfff7a843b81cad90574b3b1a82c856b9ff1bbca9f0e88059bc991be838a54b68b7ad8176dfc3bb7be4d87b425082e726a356efdbc91c3f8f14444aead6cd404911ae0ff3bbdbaff6eafc4f9c1cd7b883aace45f56ea614ceac0ef361765b43fcbbb4c36e6fd9e7dea62f8af17b05027bcc05a8d7dbbd16ef62ae0758b5af19551f92bde5bea31d0f443120327f427de12e4d23745c93386953db4a8e786436d0e565c2f94521702692b87ced68d38e528b693708d1f4e6a7b1ed525f0b5d5846523bb1805be929ebb1c6ae38579cb455d81670943529560cf5c745a3f0180106d4b1d8482bcbbdcb67e19098ac948d42432db3dce42c88ae828f675627147d2fb02baef192204bb92485a0598745a97ccee935bacd1c794ae1ad742913ef81653cd6a60d15955ab16addd524ee5e9cfd40cc7a911c0d68db34f1964bda7c79234faf6cab15e261391cec8a2695a0d0a1b472b37cef6f39eb4e2cc84d78aa2640ff9410c1f1f3b2558412ec3192ae3526e70693a2da9918f4fdb4e67bfbe7f153bd699ddff35c41be070095bd1f87e32758529ee2c53fc5f8b70c2f3b92c8b562246348268c6564443aab3ecb0497148938031286533a03f0adea9348df193e83451b80cfd7abb19b5bba96906829c8b888c73ef26d917f2f973e4484521bb27d26ff119fd44e766075af16c9c27843a11b522abd1c0caca394e06a4796bc7e36ff2bce10fa053f7bc297be70e460338b2b83a285165a036289d0c505f227786909097dccd17ca60e1710509856c05a0cb63e40d0cd83615fcfc5ed734fd5c5d3a9d97e2f5da1c459b99761a8de9788283708a3ef589d930e089baafd17e7ddcf995db66b989c0091378a464b15ce64265bbc3e00a9724d6eef9ffa24d7dd17ecd3687d73659614fdcc79f737fee20e95aaad4466fc33eb550251ea6b8a60d1f5d6684559bd7536b0f507a94b124b4b60306958b7cda13310522e0cb5264794cf3dfb72815f3b18a92038db0f4ee1940a88eef25b8ced9a144a63124c3f827ee74a45adfd968aa1c461b770c3c7d0fce0cb49736d330cb7c93cc03d8f2df948", 0x1000}], 0x4}, 0x20008051) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r1, 0x0, r3, 0x0, 0x400000, 0x0) [ 2302.928850][T24465] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 2302.974013][ T26] audit: type=1804 audit(1596889077.633:1445): pid=24468 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2585/file0" dev="sda1" ino=16269 res=1 errno=0 [ 2303.086260][ T26] audit: type=1804 audit(1596889077.653:1446): pid=24424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2585/file0" dev="sda1" ino=16269 res=1 errno=0 [ 2303.119477][ T26] audit: type=1804 audit(1596889077.663:1447): pid=24424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2585/file0" dev="sda1" ino=16269 res=1 errno=0 [ 2303.151325][ T26] audit: type=1804 audit(1596889077.723:1448): pid=24424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2585/file0" dev="sda1" ino=16269 res=1 errno=0 12:17:57 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x395100, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:57 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00009e", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:57 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000080)=[0x10001], 0x1, 0x80, 0x7, 0x7fff, 0x3, 0x0, 0xfffffff7, {0x3, 0x7fff, 0x4, 0x9, 0x4, 0x3ff, 0x6, 0x3, 0x5, 0x101, 0xfc01, 0x1ff, 0x7fff, 0x1, "ec8b8f67ea2a9be41ef57dd1ca88980f230969ef5b5fe7073242d5bcf7eee658"}}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x7c, r5, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @private=0xa010101}}, @NLBL_MGMT_A_DOMAIN={0x49, 0x1, 'R\xd1\x90\xf2\x03\x8c|2 C\x13p\x00\xd2\x97Q\xf2u{\x8bB&B\x82\x80,\x19d\x9f\xaa\xe2~\xe0)\xeeX\xad\xecX\xa8T% \x06\vK\xb6|\b\xaa\x00\xa5_\xf3\x95\xf5/M\x06\xceq\x8f\xefo\xdd\xf4m\xbb\\'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x158, 0x14, 0x100, 0x70bd2c, 0x25dfdbfc, {0xb, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "9bc4dac38b9e1805fda78f81633142177c93f8e5cac66bbd4de5e2727d4074fa0365fb31b4d0946530832c3533efecc3ff4c7fb835c5be897b5370001d01bfce582b30ab878af3777ec1196490b44e676f7190148bcb27d6715e0f9076afcfc1f4db4fd6c92f1792764f8dd60caae854e9901289cbf65aa7cff561e0c4627a66a86e2326c1a453dbd341f1d65148e1e79ad83d8b8d104bcdd8c9ff3075f423"}, @INET_DIAG_REQ_BYTECODE={0x98, 0x1, "001d971ece50cb96e36afca37d8fb8acc743c37d430123fc5ce9d186d9d9dfaf3aab1c07e6ac57d3028edeedc5d2557763605527f22ac06319f65a11d52985ab653b6b7f5806932d810925b40cdd49f9e836b49bd33fda22d1a4b6e574bd98bfcae28020930df635e8911becb63c0ad9e9a5ccdcf4e6c5d3d75711fd3462a487dea68cef21088c4ab7299d6d41c07f8a85618769"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, "5dc4"}]}, 0x158}, 0x1, 0x0, 0x0, 0x50}, 0x8010) [ 2303.205735][ T26] audit: type=1804 audit(1596889077.723:1449): pid=24424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2585/file0" dev="sda1" ino=16269 res=1 errno=0 [ 2303.293995][T24479] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:17:58 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000f0", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:58 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0xfffffe0e}], 0x1}, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={r8, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r9, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r9, 0x5659}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x2, 0xcb53}, 0x8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:58 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x58) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2303.699303][T24467] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 12:17:59 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000ff", @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x130, 0x48, 0x0, 0x130, 0x128, 0x280, 0x210, 0x210, 0x280, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48], 0x0, 0xf8, 0x130, 0x0, {}, [@common=@inet=@set2={{0x28, 'set\x00'}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@owner={{0x38, 'owner\x00'}}, @common=@mh={{0x28, 'mh\x00'}, {"3bb6"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'veth1_to_bridge\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 12:17:59 executing program 5: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x49) r0 = dup(0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x380, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000180)=0xf5, 0x5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000007000/0x2000)=nil, 0x0}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x16) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x3220c, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000000)={0x9, 0x8}) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890c, &(0x7f0000000340)={0x750, {0x2, 0x2000, @remote}, {0x2, 0x0, @dev}, {0x2, 0x4, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0xfd00, 0x0, 0x6, 0x3ffffffffffffffd, 0x8}) unshare(0x60000000) 12:17:59 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x6, 0xb}}]}}]}, 0x44}}, 0x0) bind$packet(r5, &(0x7f0000000140)={0x11, 0xf7, r8, 0x1, 0xf0, 0x6, @broadcast}, 0x14) socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5500000020007fafb72d13b2a4a2809302000000030b3983d20100", 0x18}], 0x6}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2304.537447][T24512] Cannot find set identified by id 0 to match [ 2304.575594][T24516] Cannot find set identified by id 0 to match 12:17:59 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x584e0000) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:17:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x58) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:59 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:59 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', {0xffffffff}, 0x8f86}) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x7) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:17:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000ada4bd3abab0aaaaaaaaaaaa86dd"], 0x6a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) 12:17:59 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:17:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x58) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:17:59 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2305.138347][T24532] __nla_validate_parse: 1 callbacks suppressed [ 2305.138357][T24532] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2305.164613][T24519] IPVS: ftp: loaded support on port[0] = 21 12:17:59 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:00 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x6002, 0x0) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000040)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:00 executing program 5: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) open(0x0, 0x420002, 0x49) r0 = dup(0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x380, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000180)=0xf5, 0x5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000007000/0x2000)=nil, 0x0}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x16) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x3220c, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000000)={0x9, 0x8}) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x2000, @remote}, {0x2, 0x0, @dev}, {0x2, 0x4, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0xfd00, 0x0, 0x6, 0x3ffffffffffffffd, 0x8}) unshare(0x60000000) 12:18:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2305.580828][T20218] tipc: TX() has been purged, node left! [ 2305.593245][T24581] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2305.633752][T24583] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2306.021125][ T251] attempt to access beyond end of device [ 2306.030684][ T251] loop4: rw=1, want=230, limit=54 [ 2306.044467][ T251] attempt to access beyond end of device [ 2306.060684][ T251] loop4: rw=1, want=62, limit=54 [ 2306.252666][T24592] IPVS: ftp: loaded support on port[0] = 21 12:18:01 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80)='SEG6\x00') socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000001040)=ANY=[@ANYBLOB="c8d207467b29571fb66949db1324515f0d69a904e9", @ANYRES16=r1, @ANYBLOB="000827bd7000fddbdf250f0000000e0034005cebc03185a50b619421000008007e00020000000e05910010debdcdb1b893ec297d02000863ad35ad7659dc52195bf304d7853cdfc7e88773c1a7f8d0db964f68ff74a1fbfaa2ae81d373638b30d2d8cba949112baec003d7422ec5a74721bbccf03abda1df5390be285cca540e3dd3adb52933d06b3dafb50c5c2f0613bf798a7b08fed835c12dac19ba6f0dd0015cc728c7c2b111db464549058cca228544cd8be90475a7a723236b967017f48a5dae750abf6ef4e2b84f72aa9ffb0bc24d6e4b66a5b75b2e11d6d1cbe8cc8dcd91f901f34a7b9bfdf186c3a484b08d947c1e60524a3fd775f47756b528064729844b9c06b67d59c8da616394f37a0febd6ceb10dfd68a5e28183c28051cdf10253945c731dfa9b0d93d243eab58241b0c3a320dbb2cbea20008d0938659fc8afcc09b5748aa1d2153b7c23fade4b1f8279b960935bbf2b5dac3bdab8eb085d21091230156c06df820c0b0fe9d08fee0ece61ab82aa672225ce8c2e789cb398469cef6fde40d950400f92399d4640afd019c0c9d7344fe9336b2943562eaa3314e7985944a0733e0af990cd8747e65e80443f9345e7f3b9b9817870d596e26613e55a965a2f9c1e0447569d8c7af9e12eb0cbf99fbec6922ae4955cb9ebb85457b6edeb6dbe1853c0a5d1544f6e7c4092b1a135da9b0ace12b2049fbaa107be160f406b53be615b23f5e2d6b5fe970079ede77fb7da33b020d7f1a85f3fbb0a56c6217e925ba90ac30aa0ce99ec13fe278d79e2ab66a5f965ca9cbfc9b68cd3fef6082ae6e640c06192bc24aae39437bbd7877f2371a7ff1ae61b00058f105fff88a7e0caef467f5ce252463c4c0caf579459b5c6555341412d251d2e13638afeed8b2e5d3a3d544ca3d18c37dc4ae846bcf5cbc1f89ccd551894ce19652ec82391c1b999b3cb9f5132dfca3f51d158b5e85afce474724b0ab343a2f83608ea36c273053b8d09ae85aabb3612b5ea73243c4224ea696d6fccba708a6df8b7a9963b0dfa00b37e401da5ec9435eeade60071705cf83ec0751ae890f7dfc6ffef0e1de068f78cace61558fc0a2c84c38c02e4ba2970c865087f46617846ccf2225e2863f23e26ce16696f499c475a4b7d57c41287234ab6d81b99dc6cb76679e08f218f6c2c2702a3eaec8d41447a4320501d565a7525beb6b4d9e8724db02bbebb07748d36a0cb70da7b49b0f37f9efb36ce39b4dd33952801dfa4d298093d0f03ebf1cdd3c1f061d514710fd2b055144da10d67e028255e54d9ac09f2d7a5fab55072695663cbb108d13b8ead6584b141dcf2551459de284b8c0d98b547aef361c7186f68eb54f55815c32d72882417b8976ef5afa2af2e7d12d934d3c64d301014ac2164c4baae7e5ff40dd0ada788c35705e42f4f9cb2ab47e943c2df22c2cd99cab4dc6c7dca6eabb5183ec52548344db1254feb4565678dc8d2a10fead7725d7bf5590ce76a4fd6e3edf240ae21d2292103b105b9f9faffcc028700aea23344b080463c9d767deced2bdb34a60c9230566a0737f51456ee8c48e34c395a2f9089aa18d681e1ac97b09e70e5b0a4aca3862b686951eb47cb23a9efae89f5c2574dcc0f873d5833a2ae3ebfab07649d7cce9c3379ba562c71d43bc65f84540b55cbf34e21e986f011fe56ed870e60d13ccf96dbfd62e59724d2411ebec48339e8bcbc445bd93b0a9dd349e4c2f70587bb7ddec4bc2c96237d32f241d613220443c6cb2fedf6fcd24e9e10111daf93ed06e06e1901910fc6132e0e72fe75ca1a84109e98faeeeee48b1128949437d7aa2795af296fb8877eb24dae4e46af5b0ba753ecb3599acb1023c400000800260007000000f30380006051e5aae9455ce02421b62f45d69ee79301f135e6af14a3a1a9be07b1b85f0de4cdf1a323b42a73994ef6b41d0b6c52f9b9cca6d93c3fcabaf9727ede00270d10f66b63070fcd0f95c551367fba5b91676b033a2be1b9d5de7116c65f59f20f0f65a4398c97862ce9fbc3351ca543bab319b60a7fd47161b040190cd89e60d8834c061846ca6846ca0536a66e3c61e1d4c5c1bcbafa52739d9af00083da1baf706b5321d1faf17889519fb51e02aa948d05a396ea60c311aba7f4544b4ad57e5891e7b61864e3606f36d1e4b299e102a1dc73f6afb7a60cd925f87722397bf223c7704387999fc297fe9a7d64109c42dfc037725d68f3799c038e628817dde95797a1d4bc9324bfd5e6291974fb1319cd30ff8d33ac9c61c5537053e1f11e882b56e013f7b449df589d153cd21f631526229317eb5802db99e9393b1a859835259ac8b77e4b99bac013065ae92ed70bfb03371985da38ee1246cb0b307ab92793ef6cb2dd5f256a5525adb43cdc46e03bea994a461ec7dd96f133b94a7394cf029666ef65af65fa0cc9179aed84351077f432b7bdf26def71326e8791b607858ac4744bb27d519f3fad212e33b77dc9ed2f175a866e77c014bcca5a0c4b737fcf546428eaf6b68f04f9c9dddb3b5cd4d44618f617eaa0b3f64b3433ca4abeb344c09a377ae9a063c91e80d1b22dd74e3b088967490e551da15cbbc714878ecf3520964a9462abb945ccf0845f5a667bf968b55068aa99042eefe7ba283b0e41273f2e75574d30ad005d4d5f42c67d2fb1bfea18eba1dcde8f810ccdc350d1b1c374694372f7ff55c84c42d3062aa85c11ac254cc791001a201fda820d0eee375ce1ae215ee1ba5c0fc97611e2ce614c2885245362f202c613142c5e6d9bea2aae2d8ebdff7091612b8da550c4b6c68d88cf3d3f2ca57a20f47e47f69b15924607e25739c68a0102b4c369ed42ec476ef08dff9f2c6b5230115673808726c68c2f9168a3f20d9b60bbd8f2e7ff4f052698855ee4fc5c5866d01d06a17b3b14df21db5f5ec07f306ab82df1a36f2c2b9278057d5531cd5c3dfdb9f904accedc48ba8f2a5b623a87de6e4111dacabf1c1bd4d8b781ab5873576039213ccf35d8be0de11fcdb54c0a093bffd49a54093db01d9a36de2cfe5a0ad3f9d47099beb8a0f7210372b28b6473dd29ff71de6093b171fbe6c7ab65719c5956afcaebe31300f4b381e2dfeb51d5014a384f7d2028bb675c6ee1cefb437fb0801d570200578ca209991b07abd25b64285063d7d1b0104d41447916014c2a4a65c8bfd65deceb275187bb8bc5603a34fbd8312572218e493efcdc13ff79144980cf9967fb13da5d5d40ddfe52d6a755be0bb05dce070277c9dcaec1baea3151ee923d5b931f08bdff75c4946257642fe7b8f326b14c000600960001010000"], 0x940}, 0x1, 0x0, 0x0, 0x1}, 0x81) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000000)) read$char_raw(r2, &(0x7f0000001a00)={""/19711}, 0x4e00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:18:01 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:01 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x126) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x3c}}, 0x40) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x58, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}, {0x5, 0x83, 0x1}}]}, 0x58}}, 0xc008811) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r7 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f00000001c0)=0x40) 12:18:01 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x8, 0x2], 0x2, 0x0}, 0x54, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) socket$unix(0x1, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @dev={[], 0xa9}}, 0x14) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4ae480, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) sendfile(r3, r4, 0x0, 0x12000) 12:18:01 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672c", 0x82}, {&(0x7f0000001780)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b72", 0x46}], 0x2}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001e00)="8f", 0x1}], 0x1}}], 0x2, 0x0) syz_emit_ethernet(0x22, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 2306.835235][T24632] ptrace attach of "/root/syz-executor.0"[24630] was attempted by "/root/syz-executor.0"[24632] 12:18:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:01 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000000)) [ 2307.131949][T19767] attempt to access beyond end of device [ 2307.137622][T19767] loop4: rw=1, want=230, limit=54 12:18:01 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x8, 0x2], 0x2, 0x0}, 0x54, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) socket$unix(0x1, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @dev={[], 0xa9}}, 0x14) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4ae480, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) sendfile(r3, r4, 0x0, 0x12000) [ 2307.180088][T19767] attempt to access beyond end of device [ 2307.219375][T19767] loop4: rw=1, want=62, limit=54 [ 2307.261754][T24651] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2307.327562][T24651] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:02 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x4010, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x3) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) sendmsg$qrtr(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="1cfeeafe8813e74343dac5805139cda7a647a1d2e622c118c5134e93e6e7a7f49fc687a173ec8da494897aeb5e708645219ec045768be712f5e0f1c4c14d5e1f194ea6d6d0b3879d1b7a3153f1bb36c30fa6dc60fbe8ed55871101da4b90197fc339d76029c4367be9a34156345e167e16764d9ef8de84316a266a1a28d18d9ab0db8d876f33e012bd9c87739b1553350559f66014ee068d9107d8bc4f8853ea050285f53b660a216bdf814fbe05c94df7a9abad4f01b8e9eb3a9c6f555b813c197ddc7c3138324a3443a4a9f7fd8f5f", 0xd0}, {&(0x7f0000000180)="e389afdffe20e5600d2ced", 0xb}, {&(0x7f00000001c0)="629b480c22ee2b13ed22204e6d88b6612b5b43199084ac4ad7ad2ad17c145d882cd6e29b7ee92f0fef28874472a725b64f3533d88f3b6484f4e7e33bdb8b4574915a7e9e9039de688fc2a8f81234c1cbe03cfa59bbcaf2f51e4615e256c3fc125168273a0e71f6b47d1569ae90ecc1e965269dc77550445321c8", 0x7a}, {&(0x7f0000000240)="c88a816f2f3c9167d2fc345ebb9545c958cb66b1cffd161c594b0eb1391530b23a8ea2b8e67faa4fe6e0d1ab2984513ca031026d459a81f20fc676dcc24400bd114001dc29494dcd285bdcc6056547cad384a9c29a6e510e1122487940f13a42bb652588c5adc04a93a8bb80dfb5f9b1f265a621cd877acaeb3c5e7cc43af29b09811e990c9069a46cfd9645a8b4f2480a6aa2c3e35869dff15fca0acdacf909f5f3ba5f10eb67eb6a1ae82484dcdb5c41bd04fcf5765daf27ebf6c1af4c", 0xbe}], 0x4, 0x0, 0x0, 0x20000000}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:18:02 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x2040440, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d756e69782c76657273696f6e3d3970323030302e4c2c63616368653d6e6f6e652c6e6f657874656e642c70726976706f72742c706f73697861636c2c6361e5f7c407667363616368652c6e657874656e642c76657273696f6e3d3970323030302e4c2c76657273696f6e3d3970323030302e4c2c726f6f74636f6e746578743d757365725f752c7375626a5f726f6c653d2c6673636f6e746578743d756e636f6e6728b79a62cd66696e65645f752c00"]) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r8, 0x0) sendmsg$unix(r5, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r8}}}], 0x20}, 0x0) 12:18:02 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x8, 0x2], 0x2, 0x0}, 0x54, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) socket$unix(0x1, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @dev={[], 0xa9}}, 0x14) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4ae480, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae93d9412a75e4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd306283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb83268e61420c289fec38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db2c73b0900562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00000000000000", 0xe00) sendfile(r3, r4, 0x0, 0x12000) 12:18:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:02 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], '}'}]}}, 0x0, 0x106}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2308.382048][T24683] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2308.393303][T24686] ptrace attach of "/root/syz-executor.0"[24682] was attempted by "/root/syz-executor.0"[24686] 12:18:03 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:03 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1b9b073b0031000000000047"], 0x78) 12:18:03 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:03 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) sendto(r4, &(0x7f0000000000), 0x0, 0x4040034, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) connect(r4, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x1, 0x2, 0x4, {0xa, 0x4e22, 0x8, @ipv4={[], [], @local}, 0x1}}}, 0x80) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) close(r6) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x8, 0x2], 0x2, 0x0}, 0x54, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) socket$unix(0x1, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @dev={[], 0xa9}}, 0x14) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4ae480, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) sendfile(r3, r4, 0x0, 0x12000) [ 2308.759751][T19767] attempt to access beyond end of device [ 2308.765537][T19767] loop4: rw=1, want=230, limit=54 [ 2308.780568][T19767] attempt to access beyond end of device [ 2308.786229][T19767] loop4: rw=1, want=62, limit=54 [ 2308.818251][T24710] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2308.865037][T24711] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:04 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x501800, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:18:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x55, r3}) socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:04 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x8, 0x2], 0x2, 0x0}, 0x54, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) socket$unix(0x1, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @dev={[], 0xa9}}, 0x14) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4ae480, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae93d9412a75e4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd306283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb83268e61420c289fec38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db2c73b0900562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00000000000000", 0xe00) sendfile(r3, r4, 0x0, 0x12000) 12:18:04 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001200)="895b74e29fc8e535522bed7a32ea79b717bc42ac3a565d019abadd5a3d871dbb918bcc1518839ca88193da410d54d75cec5971fba94f4d35647b272ac58ce37d06b4557b848972084e5e468452e91d3937425aa5b4f356f8e338919f304a0649c21d", 0x62}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:04 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2309.501285][T24734] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2309.679459][T20218] tipc: TX() has been purged, node left! 12:18:04 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:04 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653078000053c27bc3276003639405cb4aed12f0000006edc", 0x19}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 12:18:04 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r6 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, 0x0) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:04 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe9, 0xe9, 0x2, [@enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}, @datasec={0x0, 0x8, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}, {}], '}'}]}}, 0x0, 0x106}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2309.817613][T24752] ptrace attach of "/root/syz-executor.0"[24751] was attempted by "/root/syz-executor.0"[24752] [ 2309.882397][T24758] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2309.957582][T24764] ptrace attach of "/root/syz-executor.5"[24762] was attempted by "/root/syz-executor.5"[24764] [ 2309.985540][T24769] ptrace attach of "/root/syz-executor.0"[24767] was attempted by "/root/syz-executor.0"[24769] 12:18:05 executing program 1: unshare(0x42000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r4, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000240)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYBLOB="02000400090001040900ffff96835ca15c4580f021dba86c2c598a29c0b94dd27c2ebeebca3ad02e4838133192b21b15309b0a6ab0d077b56b8380cc564c96ba89238093566ceca3cbd3f49f2a144433646e5bd017c22d299d656d0f15d3e2e8ebf065391c26c187f2ca4cafa77907b868846845403c758a472756f61af5260bb0e27b6f9fdc7fadff619e71"], 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r5, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:18:05 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:05 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000000)=0x7fffffff, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @loopback}, 0x6, 0x1, 0x2, 0x4, 0x1000, 0x9}, 0x20) r5 = dup(r4) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) getsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x8, 0x2], 0x1, 0x0}, 0x54, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) socket$unix(0x1, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @dev={[], 0xa9}}, 0x14) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4ae480, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) sendfile(r3, r4, 0x0, 0x12000) 12:18:05 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'x'}, @func, @union={0x0, 0x5, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}]}]}}, 0x0, 0x7e}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:05 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2310.673725][ T26] audit: type=1804 audit(1596889085.323:1450): pid=24790 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3160/file0" dev="sda1" ino=16274 res=1 errno=0 12:18:05 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x96}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2310.731079][T24790] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2310.736292][T24796] IPVS: ftp: loaded support on port[0] = 21 [ 2310.751135][T24794] ptrace attach of "/root/syz-executor.0"[24791] was attempted by "/root/syz-executor.0"[24794] [ 2310.827888][ T26] audit: type=1804 audit(1596889085.473:1451): pid=24809 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir165171846/syzkaller.MADQ0f/3160/file0" dev="sda1" ino=16274 res=1 errno=0 12:18:05 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000180)=@v2={0x3, 0x1, 0x8, 0x100, 0x83, "621c2802d641c7cae3eda12f89cee309f99c6a8af9cfc9c55c9170767669f2eb39dba3a600f7bd3d773c0e20d0cd4895013179d32afb6db7e96c930594be23bee481e436d726bff752ad78827d11861c5628656c4899aed990c0d7eb056eb476ed6ba85266498794d27f99d690ce8d500ced9dcd47b827e24cb2f15b9d3bddb30874b7"}, 0x8c, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r3, 0x0, 0x400000, 0x0) 12:18:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2310.976465][T24823] ptrace attach of "/root/syz-executor.0"[24822] was attempted by "/root/syz-executor.0"[24823] 12:18:05 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001200)="895b74e29fc8e535522bed7a32ea79b717bc42ac3a565d019abadd5a3d871dbb918bcc1518839ca88193da410d54d75cec5971fba94f4d35647b272ac58ce37d06b4557b84897208", 0x48}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:05 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2311.113629][T24832] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2311.165218][T24839] ptrace attach of "/root/syz-executor.0"[24837] was attempted by "/root/syz-executor.0"[24839] [ 2311.184103][T24840] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2311.603792][T24797] IPVS: ftp: loaded support on port[0] = 21 12:18:06 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x100, 0x1, 0xffff, @dev={[], 0x19}, 'veth0_to_bridge\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:18:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000500)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0xc0481273) 12:18:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x8, 0x2], 0x1, 0x0}, 0x54, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) socket$unix(0x1, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @dev={[], 0xa9}}, 0x14) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4ae480, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) sendfile(r3, r4, 0x0, 0x12000) 12:18:06 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) 12:18:06 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000000), &(0x7f0000000040)) 12:18:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(0x0, 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:06 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}}, 0x0) [ 2312.219659][T24883] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:06 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) wait4(0x0, 0x0, 0x0, 0x0) 12:18:07 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="00ff01000000000000000000000000003e00000000000000860efad725f576107d136db4b2216381be9ef976f25dad05b3bbde33739ad2ff8be353cabe2e1e87c40b8f584e51f1c81cc6d11c232ae2a50abd8d19aa29db4e8eda4e3d0f47ee3aca4e1954adbc77edeb8e228d77413fd55623b9cf49327308f89eb1f0b5869b024c4b9f2adcbe06f7772e935d2c106143e1e6266cc7d1cc26a60ebac500a093", @ANYRES32]) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000040)={0x40000, 0x6, 0x4, 0x1000, 0x7f, {r6, r7/1000+10000}, {0x1, 0x8, 0x8, 0xfc, 0xd0, 0x0, "4ba8df3b"}, 0x3ff, 0x4, @offset=0x5, 0x3, 0x0, 0xffffffffffffffff}) write(r8, &(0x7f0000000180)="1dfabcb065fc1134ba606fe626d423d3729b94a95609522c70e40fbf6d5d3e505db78a44600c02e1aae618c94761a65f35ba6e928c4167a54081fa9f5b7192d63b7025b6ccc3df7c0fc9cd17", 0x4c) 12:18:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(0x0, 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:07 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0xf}}, 0x0) [ 2312.524697][T24900] ptrace attach of "/root/syz-executor.0"[24899] was attempted by "/root/syz-executor.0"[24900] 12:18:07 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1b9b073b0031000000000067"], 0x78) [ 2312.612301][T24905] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2312.645109][T24905] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2313.230665][T20218] tipc: TX() has been purged, node left! [ 2313.237003][T20218] tipc: TX() has been purged, node left! 12:18:08 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x14}}, 0x0) 12:18:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x8, 0x2], 0x1, 0x0}, 0x54, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) socket$unix(0x1, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @dev={[], 0xa9}}, 0x14) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4ae480, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) sendfile(r3, r4, 0x0, 0x12000) 12:18:08 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0x10, 0x2, 0x0) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x12f) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000000)={0x2, 'syz_tun\x00', {0x18f4}, 0x6}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x800) r6 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r7 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) splice(r0, 0x0, r7, 0x0, 0x400000, 0x0) 12:18:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(0x0, 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:08 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0xc0}}, 0x0) 12:18:08 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) r3 = socket$inet(0x10, 0x4, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r8, 0x0) sendmsg$unix(r5, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, r8}}}], 0x20}, 0x0) fchown(r1, r4, r8) 12:18:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:08 executing program 0: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func, @const, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, 0x0, 0x4a}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0x19000}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:08 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$inet6(0x10, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = signalfd(r0, &(0x7f0000000040)={[0x7b]}, 0x8) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x126) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x3c}}, 0x40) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xd0, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2c4d3cf00864b42d394d666ea", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r7 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000000)=0x1) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0) 12:18:08 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0xec0}}, 0x0) 12:18:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000), 0x4}, 0x9cc46edb4bdacb55, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, [0x0, 0x8, 0x2], 0x1, 0x0}, 0x54, r1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @loopback}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x324, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000200), &(0x7f0000000280)) sendmsg(0xffffffffffffffff, 0x0, 0x60400d0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0x620001, 0x0) socket$unix(0x1, 0x1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x19, r1, 0x1, 0x7, 0x6, @dev={[], 0xa9}}, 0x14) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x4ae480, 0x10) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r3, &(0x7f0000000600)="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", 0xe00) sendfile(r3, r4, 0x0, 0x12000) [ 2313.844296][T24956] ptrace attach of "/root/syz-executor.0"[24954] was attempted by "/root/syz-executor.0"[24956] 12:18:08 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001200)="895b74e29fc8e535522bed7a32ea79b717bc42ac3a565d019abadd5a3d871dbb918bcc1518839ca88193da410d54d75cec5971fba94f4d35647b272ac58ce37d06b4557b848972084e5e468452e91d3937425aa5b4f356f8e338919f304a0649c21d46eecb", 0x65}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 12:18:08 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x200400204) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2314.066903][T24967] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:08 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x33fe0}}, 0x0) 12:18:08 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}, {&(0x7f0000000000)="2e9bb176d2f9ea12b668e606c9329e58437b34a5d44e7504168230b70bf0ed138185a6d5a39708f6f8a2630bbde9ce46ea48e799e4c49755", 0x38}, {&(0x7f0000000080)="10d0da31e00a06d9bec85a9369fd1cd590a05fd6fde0d5f92c8b81834e6921d40e615b68bf2d310d07f8ba8de108549238dd7f4fd9c13f2ca414efc4b8a6", 0x3e}, {&(0x7f0000000180)="3b5005add95b67d8ce5bcee8acca1731293cbdeaa2dc658e582053a71090bf1e66b4a5c620a78599969fd15e6fcd48d9fc5772cdced69a1d03cb42496de980082c6e89cce4fc6fa70af4126941f17b0c382b529b3e72d11e810203cf28a53134ec97b202447c8b256081866c", 0x6c}], 0x4}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$FITHAW(r5, 0xc0045878) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:08 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x34a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 12:18:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) chown(0x0, 0x0, 0x0) [ 2314.302481][ T251] attempt to access beyond end of device [ 2314.308232][ T251] loop4: rw=1, want=230, limit=54 [ 2314.344378][ T251] attempt to access beyond end of device [ 2314.351941][T24977] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2314.362617][ T251] loop4: rw=1, want=62, limit=54 [ 2314.460102][T24982] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:09 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x101) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000080)={{0x4, 0x10000, 0x3, 0x8, 0x0, 0x9, 0x0, 0x7f, 0x9, 0x0, 0xa2, 0x80}, {0x0, 0x4, 0xa, 0x6d, 0x3, 0x7, 0x1f, 0x81, 0x2, 0x7, 0xff, 0x4}, {0x3000, 0x2, 0xe, 0x5, 0xa1, 0x80, 0x4a, 0x4, 0x4, 0x6, 0xf6, 0x1f}, {0x2000, 0x5000, 0x0, 0x3, 0x0, 0x3, 0x9, 0xfe, 0x3f, 0x3, 0x0, 0x7}, {0x100000, 0x2000, 0xf, 0x6, 0x7f, 0x2, 0x8, 0x40, 0x50, 0x3, 0x3f, 0x9e}, {0xd000, 0x0, 0x3, 0xf0, 0x8, 0x3b, 0xe4, 0x4, 0x2, 0x8, 0x7f, 0x7f}, {0x0, 0x6000, 0x10, 0x80, 0x0, 0x0, 0xc, 0x81, 0xff, 0xfa, 0x1, 0x6}, {0x2, 0x10000, 0xb, 0x5, 0x4, 0x0, 0x80, 0x81, 0x8b, 0x0, 0x0, 0x8}, {0x0, 0x7}, {0xd000, 0x2}, 0x1, 0x0, 0xd000, 0x250001, 0x3, 0x1000, 0x10000, [0x0, 0x3, 0x800, 0x9]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r2, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:18:09 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x200004ec}}, 0x0) 12:18:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:09 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000001200)='/dev/input/event#\x00', 0xb, 0x84a03) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x6) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) 12:18:09 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32]) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="fcc6d32e47abf6c8aa265f54ba45f562746b27cceb08aaf71141c18a59084be8484c35eed2d7deb3dfddfb6f7d3426df4ff0b2faec7f87", @ANYRESOCT, @ANYRES64=r1, @ANYRESOCT=r3, @ANYRES16=r1, @ANYRESHEX=r6, @ANYBLOB="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"], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:09 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x7ffff000}}, 0x0) 12:18:09 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = signalfd4(r2, &(0x7f0000000000)={[0x9]}, 0x8, 0x80000) renameat(r3, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:10 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0xfffffdef}}, 0x0) 12:18:10 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:10 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x2}, 0x0) [ 2316.149615][T25015] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x4}) 12:18:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 12:18:11 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x20c000, 0x800}, 0x20) 12:18:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x0) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:11 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x8}, 0x0) 12:18:11 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0xf, 0x4, 0x401, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r4, &(0x7f0000000040)=@hci, &(0x7f0000000100)=0x80, 0x80000) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:11 executing program 0: syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 12:18:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x4}) 12:18:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200027fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd0f8323058da774c0f518d781a7a8672c", 0x82}, {&(0x7f0000001b40)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b198e5032c69cf8ebe9d42dd43d2f19d49ebb5e33cf00ec91a71f81c3b192d96cc627241b95ec8fbb6c71f603e0d07f5b039820be20d5e3e2718fde4de9831bcb5a6e07585208dd2ac721d2fdab2c29411f66ec7cca1e1760a2d6ca8af4ec79cae5c78430ea32a266856c8260e4de581475abdd2153aa8fea34789320ee7714903088dfd546a136d40646857b851b65a7a93f879f49436bbbd87586553407860397d48842400126f8", 0xed}, {&(0x7f0000000040)="40c11437fb00d6eab04b0c06251f8168813a461ace70236fa0348db1d319fe147c2390db325b8f9969aec8c50d", 0x2d}, {&(0x7f0000001780)="46a43e3f510e3eac779206060abfc1e723fc59d595e9948e6d03be0d6c89d8702d5f2332fe4e991d8ce010dd173f3035a16bc1ae729800e6c53d5b3b7deacf114c931c707559610cd1366220890b11cd862202abfbcd24a76a2f0f7044964480ebd12d0bca901ac0e4e3188cb74f2b45bc4f37e1694a1e15a039e34cf59a4c86cb1dc5210f4be91e84888a860ab5286ba2a15f0b04b178198d663c", 0x9b}, {&(0x7f0000001880)="bdcc25945d5320762605855bdd5022bce4d5ecd21753f95ce22bbec3d78b5644a4f358945013c7228ccdf35e86770ac02760d99e9206acc59036a49f4b8971cf78556f3c6ca383a03d95fc318a9aeaccfa469ba8a16aa00a2bd34222049e1c038f769d461fd8e623ef4860aee8c34c32e6b311045684f83aae6d36aeb6430fcb2939da257013f355311245f449", 0x8d}, {&(0x7f0000001940)="cd96bdb578810f358b2aaaf2bacafe0e46d11b73fdeffa5726afc6a69f941fc2599736bb61d60c3c812d5418a56a3ae461b9528b039a4f69e204b182765bfcff36add10caad94fd56acc52258ccc796153c7484baa5c84b6e151acc1074b87cecf8f792f3d06", 0x66}, {&(0x7f00000019c0)="b65836c3d98df987e963b3f2c6cd9a05289662018771ef0319e3d867bbdf237a39faca25190ea708520ec42d202286b0e1971368ddbefe57a0321b27c8f96fc298daf744180af6729d8334216e730e3b47c1a011a77c60e62147ce42dede17c7719e1c0989322ff56d80305145877801828127c6252cc8", 0x77}], 0x7}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f00000023c0)="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", 0x22d}], 0x1}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000021c0)="d38874b7ef7ea6f303c4b44feba7174b2e17c595325b7a57e4197434591c16015eb2ca1bf84b081a4eb7856549e48c6d75fafe554b337f7f7d91b38d2ab08f85d9919a412c85657dd5292628fc882d5d1a8a16dc511a29ad1ac44f1c28c4b9f5e09c4ee7312183c94d191cf13f2896c5b638561a43202f9604bccfca319ff885933a97d1cd4a94e9401262f5ef", 0x8d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000015c0)=[{0x110, 0x0, 0x0, "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"}, {0x20, 0x0, 0x0, "d176fcd2609204266b1d8a8b0624"}, {0x90, 0x0, 0x0, "1b447296b7e8318385fd5400fa7d1daf037f1ee218fe68a2a10fb3755d50a15ae4bc9c2bbce56a5bc6c3dbb3342367615c58bb40cbc6b504e77adac2b8f2cd8256a57ca5885afa4951295534fb4cc2b63f3f66447dabfde3c2169788c03ac94fdefa4d097cff076dba83bd541038aeb8f6beb2d2f889f78ca1c567b0"}], 0x1c0}}, {{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001c40)="14a29f5abc5299b49ea4bf5e917d7a6c8070b64c137939abf19f1cf4cd99808b212d79653dd88352a6abb6edac4bb53f7f6dde6e68ef49afda00349a799bafd110970c8890acbd862c7e4a45f42cf875d2d69d7f07ba561ff174c54a798a145fd0f4f088fa659ec6e9b69a8f92368205644436df27792309224e4569ba9731bc6a3fd3ed1826198faabb9fd4b3e232c20991f799b3a89ee50940b22fde63be2d0b7de193359821fe77de5b0becd323c10c9e22cc6e1f90d1b3f27e310beb10ce3ac4bb49081d9cae766e12fb06f42c50a1b1d78bb8c5795f", 0xd8}, {&(0x7f0000002600)="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", 0x8bd}], 0x2, &(0x7f0000003a40)=[{0xc8, 0x0, 0x0, "ea52920b13d01e6a3e42ee5af7a2cffdde44d8bcd6fcc75030c274adc95faaf15c8253c72300085d8e4befa1c6c097006ab9f14d50a425cc02538661e7cde3e925ecd75fe86ae8334abe7cc761fd0b5a4c1bf380326b9764994ce2483efe85829e32e4dcac822aa76677ff61b9aad65944ac27f97a08a03c0a20f0709e022f49429444fa076d3cdbbba33a838b65c7d2246d0033b75fc14b346a3fd40c59c4dbc5c0dd063e5a6e4e57e08d04a954e2b27590"}, {0x10}, {0x68, 0x0, 0x0, "e9e3b60acd9476022a29750500efce764e28708ac17d71d7994445ea92e11a9b2d9e49f06ba2b7c6b6cc309509c7c62cc1935bb125dfd8a2a688c58fcd736d4f726256a726b317d735c1e2866cae1a914f"}, {0x10}, {0x50, 0x0, 0x0, "80922a7f1e3880a4f0943f601bf4890286bf2c3aa6aadd733b10e1d146d0ad5803094e82631115193fc6b69bfd01e977dd11af2b3c83b8ff8de91a83b498"}, {0xf8, 0x0, 0x0, "81a7fff813de844186f21a7d5b4af254dd1402a92df28a0e1699eae82731af3e51e72ccf9176a314a454dfad500ab43b75e12f01683d508aea41ed4e0117b9735abec29e7c0d741d671d8b2a1446553a29724b1d475453897adcac3cb604b9dc411d0989a74df807379a80151fb155a124c64578260a683227c0ff1d74e5d1710cb02dce3df477d253b7708ef24731d2b303d8bd9ec027da95278ae84e2ff73a6b95dfdb16e8399a96ba9b4ec46a182b46d62b0b782639e908583ddcd5ed07a20b656ab71de54755ad93480910ff49bf351f59d58ae28b9efb38a97eccb2bdae91a5"}, {0xa8, 0x0, 0x0, "5b20e711e090f67810aaca4822ce6d317f04a6b907eb776572555e400e41f34cb8cb58c1074daa537e75c651256f170755ba325c3c105fc126f454871971e506dba7631ad6b68079b2dab4a19927f212912db636661c47a600c9f7fa6044869a75fa92c11496c9e38fedac774cb060206f0f4ec377052def58cadfb9514c001a3ceabc199d8c5273c97c5a51cc136040f225"}, {0x5, 0x0, 0x0, "e38a33362904be9d90e93efd6d8994056a9c94591034da0086e1a684b358e41f1c771ade00a0d589d3e59cb434639ec11bddfdbdeafb3559d7d7846d9832987600fc3ef962d4bd1b2feb7bcc4efe3455cea2048782adc49a56b9b677f32e45f0189c8bade5fe983b6cba2fc423db5bfe0e4f7394dfd238c111843870485547aec64708784c1051aabdb1332e6e6d1ee2a692d34c579168f34917f0c1a3e18c517d7b9b5191b348522f964a2c4420809ffc3e80403883f30a04a1"}, {0xe0, 0x0, 0x0, "c5075ecb698cab774bdd11b477942fe3d087e6eee29b7c706ff3706e87bc95d9a28d6255abb7dd8b3e7192dfb9f9cdb39cfbe8f9d6e912a532a9e63790e6df71af52e3face60bd4dfa1e7bd84712286ce2101e1144da07d2fe398eb2e7f0389b110eb9fa0f5091571954080fa1a42c6e06f9d9e44d1f81c3021df47b9c3756abfb4d0cccc44905c6e398bab55c562c951cdf7ed91e088e56246185f3d0a2172b5c270792ed920c473400bd50614cb638a8ac7a980ed3bd3f1e097208fe6ed2be7f1ef237839fedb1829ff58c"}], 0xe8}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x128}}], 0x6, 0x4008000) 12:18:11 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x18}, 0x0) [ 2316.792982][T25055] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:11 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f00007f8000/0x2000)=nil, 0x2000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) mlockall(0x1) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x5f01) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x81, 0x0, 0x7ff}) 12:18:11 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x3, 0x80002) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:11 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x300}, 0x0) 12:18:11 executing program 0: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x130, 0x48, 0x0, 0x130, 0x128, 0x280, 0x210, 0x210, 0x280, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48], 0x0, 0xf8, 0x130, 0x0, {}, [@common=@inet=@set2={{0x28, 'set\x00'}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@owner={{0x38, 'owner\x00'}}, @common=@mh={{0x28, 'mh\x00'}, {"3bb6"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'veth1_to_bridge\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) [ 2317.140099][T25073] Cannot find set identified by id 0 to match [ 2317.155339][T25075] Cannot find set identified by id 0 to match [ 2317.328073][T25081] net_ratelimit: 2 callbacks suppressed [ 2317.328149][T25081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2317.448930][T25081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2317.507162][T25081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2318.019399][T25081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2318.051189][T25081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:18:12 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0xa, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:18:12 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x2, 0x0) 12:18:12 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) ioctl$CAPI_NCCI_GETUNIT(r4, 0x80044327, &(0x7f0000000000)=0xffffffff) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:12 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0xffffff1f}, 0x0) 12:18:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x0) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 2318.070835][T25081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2318.090284][T25080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2318.151129][T25083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2318.167902][T25096] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2318.227443][T25083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:18:12 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0x2}, 0x0) 12:18:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x20000000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/64) [ 2318.274396][T25083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:18:13 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0x3}, 0x0) [ 2318.575051][T19767] attempt to access beyond end of device [ 2318.588258][T19767] loop4: rw=1, want=230, limit=54 [ 2318.593488][T19767] attempt to access beyond end of device [ 2318.619827][T19767] loop4: rw=1, want=62, limit=54 12:18:14 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f00007f8000/0x2000)=nil, 0x2000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) mlockall(0x1) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x0, 0x0, 0x0, 0x5f01) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x81, 0x0, 0x7ff}) 12:18:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x18) 12:18:14 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) getsockname$ax25(r5, &(0x7f0000000000)={{}, [@rose, @netrom, @default, @default, @remote, @null]}, &(0x7f0000000080)=0x48) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:14 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0x4}, 0x0) 12:18:14 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) socket(0x26, 0x80000, 0x8001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) r2 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) 12:18:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x0) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:14 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x46a, 0x27, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='xfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2319.406864][T25130] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:14 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0x5}, 0x0) [ 2319.466564][T25135] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:14 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r9 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r9, 0xc0905664, 0x0) r10 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r10, 0xc0905664, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000100)={0x10000, 0x0, &(0x7f0000000080)=[r3, r6, r1, r4, r7, r8, r9, r10, r1]}, 0x9) 12:18:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:14 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0x8}, 0x0) [ 2319.778221][T21030] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2319.813709][T25152] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2319.966169][T25152] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:14 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0x9}, 0x0) [ 2320.168962][T21030] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2320.209228][T21030] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.40 [ 2320.251213][T21030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2320.276913][T21030] usb 1-1: config 0 descriptor?? [ 2320.329763][T21030] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2320.543996][T21030] usb 1-1: USB disconnect, device number 92 [ 2321.118159][T21030] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2321.488806][T21030] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2321.509718][T21030] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.40 [ 2321.523027][T21030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.545131][T21030] usb 1-1: config 0 descriptor?? [ 2321.599877][T21030] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2322.978065][ C1] net_ratelimit: 17 callbacks suppressed [ 2322.978123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2322.994011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2323.236771][T32368] usb 1-1: USB disconnect, device number 93 12:18:18 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:18:18 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.apparmor\x00') write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) 12:18:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:18 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0xe}, 0x0) 12:18:18 executing program 1: unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a31000000000000000000000000000000000000000000000000000000000000b4acc5679580476cf580bc9b760000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00040004000000090000000300000009000000d607b8040a375e04efa490efa43301ea343d3a810659801cd03e42daa9d03aac81a8431ee687a5d338422e4ae868306391e643532600ce8e84c5b3e3541a84cfcdbabf118ad68fdce9ebbd457896bfc12e56bf1e7dfa22b184252b559361f5920d6bfe04c0cce991698715d741b0d62da03a435b0ba16d4c8d287b21cebf8bc01b96e8c9f3292e5fa30b1fb232b217"], 0x1a7) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) r4 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) mount$9p_xen(&(0x7f0000000080)='syz\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x41002, &(0x7f0000000240)={'trans=xen,', {[{@aname={'aname', 0x3d, '})'}}, {@cache_mmap='cache=mmap'}, {@cachetag={'cachetag', 0x3d, '+\xef'}}, {@version_u='version=9p2000.u'}, {@aname={'aname', 0x3d, '/@\xe5##{/).^/'}}, {@aname={'aname'}}, {@version_9p2000='version=9p2000'}, {@afid={'afid', 0x3d, 0x88c}}], [{@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid'}}, {@fowner_lt={'fowner<', r3}}, {@euid_eq={'euid'}}, {@fsmagic={'fsmagic', 0x3d, 0x5b302788}}]}}) socket(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r6, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:18:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r1, 0x0, 0x0, 0x10fffb) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf}, 0xffffffc4) fallocate(r0, 0x8, 0x0, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2323.992370][T25144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog 12:18:18 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0xf}, 0x0) 12:18:18 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x4d, 0x1, 'gred\x00'}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x404c092) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580), 0x10000000000000ca}, 0x4804) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={r9, 0xfffffffa}, 0x8) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) 12:18:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x400, 0x8}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000000c0), 0x1081, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, r1}, 0x38) [ 2324.267520][T25219] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:19 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0x60}, 0x0) 12:18:19 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x401000, 0x0) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) [ 2324.332345][T25222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2324.494181][T25232] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:19 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0xf0}, 0x0) [ 2324.548235][T25232] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.2'. 12:18:19 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0x300}, 0x0) 12:18:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:19 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0x500}, 0x0) 12:18:20 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0x900}, 0x0) 12:18:20 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0x10, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="283084426838f274f308beb2f88231e9f06b372b3593b4219b53e9ab86222b3963f5bb38b11f0e0b36ad2a947a32515babdd3046a667c96033bfb4a22409034c1cacf47abb739be5f46ed333171952812fdac0", 0x53}], 0x1}, 0x60000880) r6 = gettid() tkill(r6, 0x17) ptrace$setregs(0xffffffffffffffff, r6, 0x0, &(0x7f0000000080)) r7 = gettid() tkill(r7, 0x17) ptrace$setregs(0xffffffffffffffff, r7, 0x0, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r6, @ANYRES32=r7, @ANYRES64], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000003e0000c1b4ca66c9f43ca8", @ANYRES32]) write$tun(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="0000892fb4800500040006000900aaaaaaaaaaaa0000000000009100440081002f00000c040000e002010000b43d0026a73758e7"], 0x34) 12:18:20 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000200)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1071fe, 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0x1015) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) pwritev(r0, &(0x7f0000001680)=[{0x0}, {&(0x7f0000001700)="0d4d9dca2ab5aa8b9f7d403da51ba9fc092132b0e434c66dd75cfd793b87e99f603d49f2da97f2fde3c099e9fdc34211da3892d9b6e1dcb0ec84895cac6bf461e567f5959ad02cf26ba83f6015838c769033a3c4bd9796b62371d5e4c98af0f8b4d526f87117116e4bae3440dc88ba8655c8262b352be1e3d5629ea176120bc5e26f440edb50246c6051326d0aa3f6014402c8c51200ed7e4866bd7d0ad4952a344f49cda94a33eebfb99940f36cea0b2415d0b3db2791f97b89cf9a6236816a86953fa30b29e5d57d20c45422358aebcb45c436b03da777d3d26c928937b357e3f59884c1c3be75dbb32ef35a5a8ad58595ca489b74ae6933647a804e5724cd250be8e0f657b7da39e914e6e4e3898cd2ffefc4952367ac035afba5ceda19c7f538553dd1e3c92495c3763a82325fbc15849ffa6b27d9a04abb54a36c7d93bb9a8f9620d8b7861b6cc22410b2b67551e216980855af422be1f2d0024f85f6da2ec38fcb668978e11f702f81849994140e659f4b2c03341fdf704fac9fe4b140c98885c37261961ff18bf629cb88032f2b6ce4f8abe750efaa16a01eac84967dbf549a0de2f50a5e1454052b812523b66c4747fe5be07b38c05b13639ec7f10126e80bab5490bd4e16af9f26553d0865216777a62adabed1f2bfe5b2ba158cd2f20dabbee612a9cb1063ecbe9c0d643f55b3956c58a229b3698924da487397de1d7c1ae401f31de656dc66c44947d149f7a2623ff03bc523ce3a16c2016be727e6c5a8ff5c2347b46708f072d86d57cc1eefa322c19c46e0bda0ca03a9d13b4b9ccb8cf449fd76299d3ee1eb3c7245d84702de1bf497c6e56ff803978bc5dd839e7fe0c2beff3ae1a9222f761df88100fb607373ff2cf7503d1cea6b086e38f55157587ae21e0117e079594c70e2f58b785c623ba54e1183a37be7a295bfe9e89621017fc8d7dabc97e977b5a239fa26b0631858a578ac2dd0ea38ceb6711ed88b923fb9156c4ec6e6f49cf0eb584e46c94c1341d6367492b1b55116396102ead5657552f64e471e22252cef56b017d0d5bad3bebfd391f232cde1f6933238998e9f813fb78c90e86c02ca1846337fbcf3ee2ff50b92ec996f2676c9facbb158de36456d69d6114344928f39f88b56b36cabfc593d049b1b87d39a7aaa8bc53bc1b67365e680122194eb93245d33a6c0e166132769f767aa8d17bf304360406be42fe2d573ac72ffcf84dee87b1552af838e4475e525ab3e3ca4c8fe5137bf7638519e4457c9518d13b4576d9d682a4e79f052c3a2bcbf4bd3341cc5ca039d901a0e7c3af22b6a7e45c88c9a590a11cbfe2f2a562e0a03bbae68ebc63a981329ea402e7ee21d5acb9e006cbd684a862c3d2bdd6cbc4a8b2e3636a13bd49d9818cf4f1086a36c55661da7de1c9e3c902e57ba5e213a463df134c244d974ec2dd7246fc8b5b3ca32a64637f9621cb6e8a4e1d69ddc1f32c45043806668e03834a5a4fe998486c8e003490f4ccc060330d2bf55dc6f4827a803022a45494f845d48c11869e36be6cfac7e739137870eca1aee5722cc070f347babb9c5dc98f511c43cfc4b141b86debe86f4db097714a9370d466ed31039cf413ae647df53633c39752b8ea1992dda13462d17a06ba803de66dc745fe19eaa0e2dddb8003ed9b4c71906e59bc119e65c8ab520583810dce592f92a71d2b911d97649601860378eb04bdff1e95668ecacdddede09bfbc990f8a5db42eabd96e98e7896b742ba140d78496a6c08abd626ba78f83111dca291074318ab5d5b5f0f9e1054a74dc88252750593926f81402d5dbac78e6136f13de3a3dc86d2e5ff703907f06afd43a8e7436218fb3486df8ab45e07152c02f7ffef2b84070bafa5b92b89b25852d09ed063835a8d3be8f46cb282f1a9bfa6754330394d629b7fdd90179606a2469bfa759ba7096da5898f8a17e75d10c1017b105b36cf156a707204ee4fdbdd6d4286c886d53b3d8aa227c14d3c91f3f6ba917a8e47285cba5354861e6e0a7c12c31e4c494d9425ae0f3bf3ef9c1021634e599952e2d2d4e9328c374744ae664b9787cc01475cf9e1d44b9e05d5432db2db2e6113e9055d70e01a62951a5dc2f407f33d16028a20bf7fc66814c3ef609dc55f0b9c8d659487d490935a0c3554e15bb5a441ff16b7de13f3335c26e9fa47eed5424567aaf6731fbd0b13ec773b27f2698fd1f68bbaa8b892b9604fc3c6efa5a67cca0148d4cfed49b2fe2e61b45f058474e4d023ee3dc1060783997b8c4", 0x64c}], 0x2, 0xdb5, 0x0) 12:18:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000140)={0x0, 0x2000, 0x0, 0x6}) 12:18:20 executing program 1: unshare(0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x80010, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r1, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>\x00\x00\x00\x00\x00\x00\x00', @ANYRES32]) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x126) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}}, 0x40) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4014080}, 0x4) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000080)={[0x0, 0xff, 0x800, 0x2, 0x1, 0x9, 0x4, 0x3, 0x1, 0x1, 0xf9a1, 0x9, 0x7fff, 0x10000, 0xa4ab, 0xff], 0x5000, 0x202802}) [ 2325.751813][ T26] audit: type=1804 audit(1596889100.405:1452): pid=25282 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir423946036/syzkaller.Si4HsN/2599/file0" dev="sda1" ino=16260 res=1 errno=0 12:18:20 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffff7a}]}) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) 12:18:20 executing program 1: unshare(0x0) r0 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3b93df450cefad43, 0x30, r1, 0xffffe000) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) sendto$l2tp(r3, &(0x7f0000000000)="5d4e34cff8c78c94f019f284d435a0ba1db3b8d95e1b14840ced099624e51d401f4ad4c7a5795cfbb4f4346c753face00d60", 0x32, 0x4000010, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0xb6640000) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000001000)={0x0, 0x200000, 0x800}, 0x20) 12:18:20 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0xe00}, 0x0) 12:18:20 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0x0) [ 2325.799127][ T26] audit: type=1800 audit(1596889100.455:1453): pid=25281 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=1019 res=0 errno=0 12:18:20 executing program 3: sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000480130005"], 0x2c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fff"], 0x2c}, 0x1, 0xec0}, 0x0) 12:18:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x6cf0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000240)='./file1\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x0, @private1, 0xfffffe01}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8000, @loopback, 0x9}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x8, @empty, 0x100000}], 0x74) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0x2) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 12:18:20 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet6(0x10, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2809302000000030b4302", 0x18}], 0x1}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0xfffffdb1) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x12) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000001c0)={0x94d18508a4f80361, 0x2, 0x0, r1, 0x0, &(0x7f0000000180)={0x990a78, 0xde, [], @value64=0x48f}}) ioctl$TIOCCONS(r6, 0x541d) r7 = creat(&(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000200)) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000080)={0x8}, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x400000, 0xc) 12:18:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1107], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 2326.419259][T24923] ================================================================== [ 2326.419385][T24923] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x44b/0xa30 [ 2326.419398][T24923] Read of size 6 at addr ffff888090e96604 by task kworker/0:3/24923 [ 2326.419402][T24923] [ 2326.419418][T24923] CPU: 0 PID: 24923 Comm: kworker/0:3 Not tainted 5.8.0-syzkaller #0 [ 2326.419427][T24923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2326.419450][T24923] Workqueue: events_power_efficient fb_flashcursor [ 2326.419459][T24923] Call Trace: [ 2326.419475][T24923] dump_stack+0x18f/0x20d [ 2326.419492][T24923] ? soft_cursor+0x44b/0xa30 [ 2326.419505][T24923] ? soft_cursor+0x44b/0xa30 [ 2326.419525][T24923] print_address_description.constprop.0.cold+0xae/0x436 [ 2326.419541][T24923] ? mark_lock+0xbc/0x1710 [ 2326.419561][T24923] ? vprintk_func+0x97/0x1a6 [ 2326.419578][T24923] ? soft_cursor+0x44b/0xa30 [ 2326.419592][T24923] kasan_report.cold+0x1f/0x37 [ 2326.419610][T24923] ? soft_cursor+0x44b/0xa30 [ 2326.419629][T24923] check_memory_region+0x13d/0x180 [ 2326.419645][T24923] memcpy+0x20/0x60 [ 2326.419660][T24923] soft_cursor+0x44b/0xa30 [ 2326.419684][T24923] ? lockdep_hardirqs_on+0x76/0xf0 [ 2326.419702][T24923] bit_cursor+0x1166/0x17d0 [ 2326.419726][T24923] ? kmalloc_array.constprop.0+0x20/0x20 [ 2326.419749][T24923] ? __down_trylock_console_sem+0xc8/0x210 [ 2326.419766][T24923] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2326.419781][T24923] ? fb_get_color_depth+0x11a/0x240 [ 2326.419798][T24923] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2326.419815][T24923] ? get_color+0x20e/0x410 [ 2326.419831][T24923] ? kmalloc_array.constprop.0+0x20/0x20 [ 2326.419849][T24923] fb_flashcursor+0x374/0x3e0 [ 2326.419870][T24923] process_one_work+0x94c/0x1670 [ 2326.419894][T24923] ? lock_release+0x8e0/0x8e0 [ 2326.419912][T24923] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2326.419931][T24923] ? rwlock_bug.part.0+0x90/0x90 [ 2326.419957][T24923] worker_thread+0x64c/0x1120 [ 2326.419987][T24923] ? process_one_work+0x1670/0x1670 [ 2326.420005][T24923] kthread+0x3b5/0x4a0 [ 2326.420020][T24923] ? __kthread_bind_mask+0xc0/0xc0 [ 2326.420034][T24923] ? __kthread_bind_mask+0xc0/0xc0 [ 2326.420055][T24923] ret_from_fork+0x1f/0x30 [ 2326.420076][T24923] [ 2326.420084][T24923] Allocated by task 10246: [ 2326.420097][T24923] save_stack+0x1b/0x40 [ 2326.420111][T24923] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 2326.420122][T24923] __kmalloc+0x17a/0x340 [ 2326.420134][T24923] fbcon_set_font+0x34f/0x8b0 [ 2326.420148][T24923] con_font_op+0xd25/0x1110 [ 2326.420161][T24923] vt_ioctl+0x1be1/0x2c20 [ 2326.420174][T24923] tty_ioctl+0x1019/0x15f0 [ 2326.420189][T24923] __x64_sys_ioctl+0x193/0x200 [ 2326.420203][T24923] do_syscall_64+0x2d/0x70 [ 2326.420218][T24923] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2326.420223][T24923] [ 2326.420229][T24923] Freed by task 26: [ 2326.420241][T24923] save_stack+0x1b/0x40 [ 2326.420254][T24923] __kasan_slab_free+0xf5/0x140 [ 2326.420265][T24923] kfree+0x103/0x2c0 [ 2326.420280][T24923] skb_release_data+0x6d9/0x910 [ 2326.420293][T24923] kfree_skb.part.0+0xc2/0x350 [ 2326.420305][T24923] kfree_skb+0x7d/0x100 [ 2326.420319][T24923] kauditd_hold_skb+0x155/0x180 [ 2326.420332][T24923] kauditd_send_queue+0x19d/0x210 [ 2326.420345][T24923] kauditd_thread+0x7e7/0xb70 [ 2326.420357][T24923] kthread+0x3b5/0x4a0 [ 2326.420371][T24923] ret_from_fork+0x1f/0x30 [ 2326.420375][T24923] [ 2326.420386][T24923] The buggy address belongs to the object at ffff888090e96000 [ 2326.420386][T24923] which belongs to the cache kmalloc-2k of size 2048 [ 2326.420398][T24923] The buggy address is located 1540 bytes inside of [ 2326.420398][T24923] 2048-byte region [ffff888090e96000, ffff888090e96800) [ 2326.420404][T24923] The buggy address belongs to the page: [ 2326.420419][T24923] page:ffffea000243a580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 [ 2326.420430][T24923] flags: 0xfffe0000000200(slab) [ 2326.420454][T24923] raw: 00fffe0000000200 ffffea00023c5648 ffffea0002666d08 ffff8880aa040e00 [ 2326.420471][T24923] raw: 0000000000000000 ffff888090e96000 0000000100000001 0000000000000000 [ 2326.420478][T24923] page dumped because: kasan: bad access detected [ 2326.420482][T24923] [ 2326.420487][T24923] Memory state around the buggy address: [ 2326.420499][T24923] ffff888090e96500: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2326.420511][T24923] ffff888090e96580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2326.420522][T24923] >ffff888090e96600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2326.420528][T24923] ^ [ 2326.420539][T24923] ffff888090e96680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2326.420551][T24923] ffff888090e96700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2326.420557][T24923] ================================================================== [ 2326.420562][T24923] Disabling lock debugging due to kernel taint [ 2326.420569][T24923] Kernel panic - not syncing: panic_on_warn set ... [ 2326.420583][T24923] CPU: 0 PID: 24923 Comm: kworker/0:3 Tainted: G B 5.8.0-syzkaller #0 [ 2326.420590][T24923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2326.420602][T24923] Workqueue: events_power_efficient fb_flashcursor [ 2326.420608][T24923] Call Trace: [ 2326.420621][T24923] dump_stack+0x18f/0x20d [ 2326.420634][T24923] ? soft_cursor+0x370/0xa30 [ 2326.420649][T24923] panic+0x2e3/0x75c [ 2326.420664][T24923] ? __warn_printk+0xf3/0xf3 [ 2326.420682][T24923] ? trace_hardirqs_on+0x55/0x220 [ 2326.420695][T24923] ? soft_cursor+0x44b/0xa30 [ 2326.420706][T24923] ? soft_cursor+0x44b/0xa30 [ 2326.420719][T24923] end_report+0x4d/0x53 [ 2326.420733][T24923] kasan_report.cold+0xd/0x37 [ 2326.420746][T24923] ? soft_cursor+0x44b/0xa30 [ 2326.420761][T24923] check_memory_region+0x13d/0x180 [ 2326.420774][T24923] memcpy+0x20/0x60 [ 2326.420786][T24923] soft_cursor+0x44b/0xa30 [ 2326.420802][T24923] ? lockdep_hardirqs_on+0x76/0xf0 [ 2326.420815][T24923] bit_cursor+0x1166/0x17d0 [ 2326.420832][T24923] ? kmalloc_array.constprop.0+0x20/0x20 [ 2326.420848][T24923] ? __down_trylock_console_sem+0xc8/0x210 [ 2326.420863][T24923] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 2326.420876][T24923] ? fb_get_color_depth+0x11a/0x240 [ 2326.420890][T24923] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2326.420903][T24923] ? get_color+0x20e/0x410 [ 2326.420917][T24923] ? kmalloc_array.constprop.0+0x20/0x20 [ 2326.420931][T24923] fb_flashcursor+0x374/0x3e0 [ 2326.420955][T24923] process_one_work+0x94c/0x1670 [ 2326.420972][T24923] ? lock_release+0x8e0/0x8e0 [ 2326.420987][T24923] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 2326.420999][T24923] ? rwlock_bug.part.0+0x90/0x90 [ 2326.421013][T24923] worker_thread+0x64c/0x1120 [ 2326.421030][T24923] ? process_one_work+0x1670/0x1670 [ 2326.421039][T24923] kthread+0x3b5/0x4a0 [ 2326.421049][T24923] ? __kthread_bind_mask+0xc0/0xc0 [ 2326.421059][T24923] ? __kthread_bind_mask+0xc0/0xc0 [ 2326.421071][T24923] ret_from_fork+0x1f/0x30 [ 2326.422766][T24923] Kernel Offset: disabled [ 2327.093747][T24923] Rebooting in 86400 seconds..