Warning: Permanently added '[localhost]:64015' (ECDSA) to the list of known hosts. [ 76.616603][ T38] audit: type=1400 audit(1575023720.922:42): avc: denied { map } for pid=7814 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2019/11/29 10:35:20 fuzzer started 2019/11/29 10:35:22 dialing manager at 10.0.2.10:46599 2019/11/29 10:35:22 syscalls: 2543 2019/11/29 10:35:22 code coverage: enabled 2019/11/29 10:35:22 comparison tracing: enabled 2019/11/29 10:35:22 extra coverage: extra coverage is not supported by the kernel 2019/11/29 10:35:22 setuid sandbox: enabled 2019/11/29 10:35:22 namespace sandbox: enabled 2019/11/29 10:35:22 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/29 10:35:22 fault injection: enabled 2019/11/29 10:35:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/29 10:35:22 net packet injection: enabled 2019/11/29 10:35:22 net device setup: enabled 2019/11/29 10:35:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/29 10:35:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 10:35:36 executing program 0: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x826e5b19d92f876f, 0x0) [ 92.250499][ T38] audit: type=1400 audit(1575023736.552:43): avc: denied { map } for pid=7834 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1039 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 10:35:36 executing program 1: msgctl$IPC_SET(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000500001c0016001800010014000900000cfffffffffffff90000000000000008001b0000000000"], 0x44}}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) [ 92.439710][ T7835] IPVS: ftp: loaded support on port[0] = 21 [ 92.449456][ T7837] IPVS: ftp: loaded support on port[0] = 21 10:35:36 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x9) [ 92.594709][ T7837] chnl_net:caif_netlink_parms(): no params data found [ 92.613421][ T7835] chnl_net:caif_netlink_parms(): no params data found [ 92.649386][ T7837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.657776][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.666595][ T7837] device bridge_slave_0 entered promiscuous mode [ 92.680287][ T7842] IPVS: ftp: loaded support on port[0] = 21 10:35:37 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000500001c0016001800010014000900000cfffffffffffff90000000000000008001b0000000000"], 0x44}}, 0x0) [ 92.690958][ T7837] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.699026][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.710224][ T7837] device bridge_slave_1 entered promiscuous mode [ 92.725176][ T7835] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.735367][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.746574][ T7835] device bridge_slave_0 entered promiscuous mode [ 92.756728][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.765704][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.774057][ T7835] device bridge_slave_1 entered promiscuous mode [ 92.788774][ T7837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.804378][ T7837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.830870][ T7835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.844109][ T7835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 10:35:37 executing program 4: getpid() perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 92.871994][ T7837] team0: Port device team_slave_0 added [ 92.882505][ T7844] IPVS: ftp: loaded support on port[0] = 21 [ 92.895088][ T7835] team0: Port device team_slave_0 added [ 92.907175][ T7837] team0: Port device team_slave_1 added [ 92.915337][ T7835] team0: Port device team_slave_1 added 10:35:37 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) lseek(r0, 0x0, 0x4) [ 93.013850][ T7835] device hsr_slave_0 entered promiscuous mode [ 93.051909][ T7835] device hsr_slave_1 entered promiscuous mode [ 93.173221][ T7837] device hsr_slave_0 entered promiscuous mode [ 93.241496][ T7837] device hsr_slave_1 entered promiscuous mode [ 93.311403][ T7837] debugfs: Directory 'hsr0' with parent '/' already present! [ 93.325609][ T7847] IPVS: ftp: loaded support on port[0] = 21 [ 93.339319][ T7849] IPVS: ftp: loaded support on port[0] = 21 [ 93.377499][ T38] audit: type=1400 audit(1575023737.682:44): avc: denied { create } for pid=7835 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 93.403368][ T38] audit: type=1400 audit(1575023737.682:45): avc: denied { write } for pid=7835 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 93.429307][ T38] audit: type=1400 audit(1575023737.682:46): avc: denied { read } for pid=7835 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 93.478016][ T7835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.593904][ T7835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.635615][ T7842] chnl_net:caif_netlink_parms(): no params data found [ 93.658372][ T7835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.707570][ T7837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.794821][ T7837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.854592][ T7837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.924396][ T7844] chnl_net:caif_netlink_parms(): no params data found [ 93.934774][ T7837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.033613][ T7835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.138889][ T7842] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.146158][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.153956][ T7842] device bridge_slave_0 entered promiscuous mode [ 94.161511][ T7842] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.168911][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.176746][ T7842] device bridge_slave_1 entered promiscuous mode [ 94.200117][ T7844] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.207141][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.215260][ T7844] device bridge_slave_0 entered promiscuous mode [ 94.224086][ T7844] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.232382][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.240291][ T7844] device bridge_slave_1 entered promiscuous mode [ 94.256448][ T7842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.266664][ T7842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.313835][ T7844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.331126][ T7844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.361306][ T7842] team0: Port device team_slave_0 added [ 94.368185][ T7842] team0: Port device team_slave_1 added [ 94.386310][ T7847] chnl_net:caif_netlink_parms(): no params data found [ 94.463446][ T7842] device hsr_slave_0 entered promiscuous mode [ 94.551622][ T7842] device hsr_slave_1 entered promiscuous mode [ 94.591290][ T7842] debugfs: Directory 'hsr0' with parent '/' already present! [ 94.598896][ T7849] chnl_net:caif_netlink_parms(): no params data found [ 94.615683][ T7844] team0: Port device team_slave_0 added [ 94.636572][ T7844] team0: Port device team_slave_1 added [ 94.660830][ T7849] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.668249][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.676227][ T7849] device bridge_slave_0 entered promiscuous mode [ 94.690265][ T7849] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.697470][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.705230][ T7849] device bridge_slave_1 entered promiscuous mode [ 94.725744][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.733437][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.741096][ T7847] device bridge_slave_0 entered promiscuous mode [ 94.750781][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.758277][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.765702][ T7847] device bridge_slave_1 entered promiscuous mode [ 94.823213][ T7844] device hsr_slave_0 entered promiscuous mode [ 94.871500][ T7844] device hsr_slave_1 entered promiscuous mode [ 94.931644][ T7844] debugfs: Directory 'hsr0' with parent '/' already present! [ 94.959037][ T7842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.013709][ T7842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.076315][ T7842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.144257][ T7842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.193780][ T7849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.203917][ T7849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.216679][ T7847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.235179][ T7835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.248082][ T7847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.268418][ T7847] team0: Port device team_slave_0 added [ 95.277875][ T7847] team0: Port device team_slave_1 added [ 95.290233][ T7849] team0: Port device team_slave_0 added [ 95.343190][ T7847] device hsr_slave_0 entered promiscuous mode [ 95.391663][ T7847] device hsr_slave_1 entered promiscuous mode [ 95.471331][ T7847] debugfs: Directory 'hsr0' with parent '/' already present! [ 95.487048][ T7849] team0: Port device team_slave_1 added [ 95.492800][ T7844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.552799][ T7844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.608925][ T7844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.673061][ T7844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.738944][ T7835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.793117][ T7849] device hsr_slave_0 entered promiscuous mode [ 95.851529][ T7849] device hsr_slave_1 entered promiscuous mode [ 95.911593][ T7849] debugfs: Directory 'hsr0' with parent '/' already present! [ 95.926014][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.934007][ T564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.967949][ T7847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.022897][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.031645][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.040377][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.047816][ T3747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.058737][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.073495][ T7837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.082569][ T7847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.133384][ T7847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.215514][ T7847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.317845][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.326144][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.334530][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.341443][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.348685][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.357441][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.365331][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.374774][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.384871][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.418273][ T7837] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.428511][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.436819][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.444723][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.453357][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.462185][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.470727][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.479385][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.486355][ T7838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.495103][ T7849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.563975][ T7849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.636129][ T7849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.733495][ T7849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.836691][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.844804][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.853306][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.862231][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.869251][ T7838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.877481][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.886591][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.909706][ T7835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.921474][ T7835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.948576][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.957311][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.966013][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.976219][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.984904][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.993781][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.002084][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.029332][ T7842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.037811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.045648][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.068174][ T7835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.076065][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.084564][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.093317][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.101620][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.117735][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.126056][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.137228][ T7844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.148571][ T7837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.148925][ T38] audit: type=1400 audit(1575023741.452:47): avc: denied { associate } for pid=7835 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 97.167568][ T7837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.190559][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.198275][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.206205][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.214263][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.236068][ T7847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.249047][ T7842] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.263675][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.271595][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.281073][ T7847] 8021q: adding VLAN 0 to HW filter on device team0 10:35:41 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) [ 97.311925][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.320326][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.330762][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.338157][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.346372][ T38] audit: type=1804 audit(1575023741.652:48): pid=7865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir820865861/syzkaller.CerMWQ/1/file0/bus" dev="ramfs" ino=33041 res=1 [ 97.346663][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.385660][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 10:35:41 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) [ 97.402583][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.411280][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.420646][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.427755][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.437133][ T38] audit: type=1804 audit(1575023741.742:49): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir820865861/syzkaller.CerMWQ/2/file0/bus" dev="ramfs" ino=32049 res=1 [ 97.439775][ T7844] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.474453][ T7869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.494451][ T7849] 8021q: adding VLAN 0 to HW filter on device bond0 10:35:41 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) [ 97.509932][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.518350][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.530011][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.537162][ T38] audit: type=1804 audit(1575023741.842:50): pid=7878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir820865861/syzkaller.CerMWQ/3/file0/bus" dev="ramfs" ino=32060 res=1 10:35:41 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) [ 97.540293][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.578307][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.585449][ T7860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.590965][ T38] audit: type=1804 audit(1575023741.892:51): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir820865861/syzkaller.CerMWQ/4/file0/bus" dev="ramfs" ino=32066 res=1 10:35:41 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) lseek(0xffffffffffffffff, 0x0, 0x4) [ 97.596924][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.629055][ T7860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.637563][ T7860] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.644871][ T7860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.655025][ T7870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 10:35:41 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) lseek(0xffffffffffffffff, 0x0, 0x4) [ 97.677160][ T7849] 8021q: adding VLAN 0 to HW filter on device team0 10:35:42 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 10:35:42 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) lseek(0xffffffffffffffff, 0x0, 0x4) [ 97.717040][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.726391][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.734852][ T38] audit: type=1804 audit(1575023742.052:52): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir406801938/syzkaller.sr7Ii0/1/file0/bus" dev="ramfs" ino=32084 res=1 [ 97.735300][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.772294][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.786014][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.794708][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.806273][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.815011][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.823479][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.831581][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.839332][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.847837][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.856327][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.864823][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.873723][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.882062][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.890104][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.897169][ T7853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.907644][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.922041][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.929741][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.937659][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.947014][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.955391][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.962440][ T7853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.970027][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.978856][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.987465][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.994524][ T7853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.002371][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.010692][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.018764][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.026698][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.035044][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.041793][ T7853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.049426][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.057061][ T7853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.078846][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.086765][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.094942][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.103262][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.112058][ T7858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.126072][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.134859][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.143418][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.151365][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.159530][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.168056][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.175865][ T3747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.191492][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.198886][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.210149][ T7847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.220465][ T7842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.230878][ T7842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.251944][ T7844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.262347][ T7844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.274715][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.282835][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.290690][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.298508][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.306470][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.314588][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.322549][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.330737][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.339096][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.347238][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.355293][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.363401][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.372182][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.380197][ T2783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.403181][ T7844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.412366][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.420794][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.429875][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.437545][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.451856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.460242][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.468948][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.476841][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.486816][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.504117][ T7842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.520319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.528657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.540146][ T7849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.573737][ T7908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.590966][ T7910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.619661][ T38] audit: type=1400 audit(1575023742.922:53): avc: denied { open } for pid=7913 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 98.659704][ T38] audit: type=1400 audit(1575023742.922:54): avc: denied { kernel } for pid=7913 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 10:35:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 10:35:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:43 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 10:35:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 10:35:43 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x9) 10:35:43 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) [ 98.976040][ T38] audit: type=1804 audit(1575023743.282:55): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/syzkaller-testdir899266923/syzkaller.Vc6cjB/1/file0/bus" dev="ramfs" ino=32143 res=1 10:35:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 10:35:43 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 10:35:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 10:35:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 10:35:43 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 10:35:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) [ 99.088136][ T38] audit: type=1804 audit(1575023743.292:56): pid=7934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir820865861/syzkaller.CerMWQ/8/file0/bus" dev="ramfs" ino=33130 res=1 10:35:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) 10:35:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) [ 99.120710][ T38] audit: type=1804 audit(1575023743.302:57): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir158870408/syzkaller.6zMQUd/1/file0/bus" dev="ramfs" ino=33132 res=1 10:35:43 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 10:35:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:43 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 10:35:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) 10:35:43 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 10:35:43 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) 10:35:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) 10:35:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:43 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14}, 0xffffffffffffffea) 10:35:43 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 10:35:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 10:35:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:43 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 10:35:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 10:35:43 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:43 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:43 executing program 5: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 10:35:43 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 10:35:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:43 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) dup2(0xffffffffffffffff, r0) 10:35:44 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') 10:35:44 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 10:35:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 5: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 10:35:44 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 3: chdir(&(0x7f0000000280)='./file0\x00') 10:35:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) dup2(0xffffffffffffffff, r0) 10:35:44 executing program 5: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 10:35:44 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 10:35:44 executing program 3: chdir(&(0x7f0000000280)='./file0\x00') 10:35:44 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:44 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 10:35:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 0: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) dup2(0xffffffffffffffff, r0) 10:35:44 executing program 3: chdir(&(0x7f0000000280)='./file0\x00') 10:35:44 executing program 0: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 5: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 10:35:44 executing program 3: mkdir(0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 10:35:44 executing program 0: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 1: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 10:35:44 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) socket$inet6(0xa, 0x2, 0x0) 10:35:44 executing program 3: mkdir(0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 10:35:44 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:44 executing program 1: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 3: mkdir(0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') 10:35:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 10:35:44 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(0x0) 10:35:44 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:44 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) 10:35:44 executing program 1: mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:44 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(0x0) 10:35:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 10:35:44 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 4: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r0 = socket$inet6(0xa, 0x2, 0x0) dup2(r0, 0xffffffffffffffff) 10:35:44 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) chdir(0x0) 10:35:44 executing program 2: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) 10:35:44 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 4: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r0 = socket$inet6(0xa, 0x2, 0x0) dup2(r0, 0xffffffffffffffff) 10:35:44 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 2: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) 10:35:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 10:35:44 executing program 4: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r0 = socket$inet6(0xa, 0x2, 0x0) dup2(r0, 0xffffffffffffffff) 10:35:44 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 10:35:44 executing program 2: ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) 10:35:44 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:44 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) 10:35:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:44 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) 10:35:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:44 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:44 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) 10:35:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:44 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:44 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:44 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) 10:35:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:44 executing program 2: openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) 10:35:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:44 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:45 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:45 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:45 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:45 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)) 10:35:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:45 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)) 10:35:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:45 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r0, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)) 10:35:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(0x0) open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(0x0, 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, r0) 10:35:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(0x0, 0x141041, 0x0) 10:35:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(0x0, 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x0, 0x0) dup2(r1, r0) 10:35:45 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r0, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(0x0, 0x141041, 0x0) 10:35:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(0x0, 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r0, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(0x0, 0x141041, 0x0) 10:35:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x0, 0x0) dup2(r1, r0) 10:35:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 10:35:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 10:35:45 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x0, 0x0) dup2(r1, r0) 10:35:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:45 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) socket$inet6(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, r0) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:45 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 2: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:45 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:45 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) socket$inet6(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, r0) 10:35:45 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) 10:35:45 executing program 2: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:45 executing program 2: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:45 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 10:35:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) socket$inet6(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, r0) 10:35:46 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:46 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:46 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 10:35:46 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 10:35:46 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:46 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 10:35:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:46 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 10:35:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 10:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 10:35:46 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(r0, r1, 0x0, 0x80000000) 10:35:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x10079c4}) r1 = socket$inet6(0xa, 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 10:35:46 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x141041, 0x0) r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 10:35:46 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(r0, r1, 0x0, 0x80000000) 10:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) sendfile(r0, r1, 0x0, 0x80000000) 10:35:46 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:46 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') r2 = socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, 0x0, 0xffff7ffc) 10:35:46 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) sendfile(r0, r0, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) 10:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) 10:35:46 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) sendfile(r0, r0, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 10:35:46 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) 10:35:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:46 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 10:35:46 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000000) [ 102.981220][ C3] hrtimer: interrupt took 23347 ns 10:35:47 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:47 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') r2 = socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, 0x0, 0xffff7ffc) 10:35:47 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) sendfile(r0, r0, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:47 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) 10:35:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) [ 103.183788][ T38] kauditd_printk_skb: 38 callbacks suppressed 10:35:47 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) [ 103.183797][ T38] audit: type=1800 audit(1575023747.492:96): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16570 res=0 10:35:47 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') r2 = socket$kcm(0x29, 0x2, 0x0) sendfile(r2, r1, 0x0, 0xffff7ffc) 10:35:47 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x40096101, 0x0) [ 103.223950][ T38] audit: type=1800 audit(1575023747.532:97): pid=8693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16609 res=0 [ 103.234696][ T8704] QAT: failed to copy from user cfg_data. 10:35:47 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x40096101, 0x0) 10:35:47 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) [ 103.266079][ T8710] QAT: failed to copy from user cfg_data. 10:35:47 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) [ 103.276212][ T38] audit: type=1800 audit(1575023747.582:98): pid=8709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16615 res=0 10:35:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:47 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) [ 103.327301][ T38] audit: type=1800 audit(1575023747.612:99): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16615 res=0 10:35:47 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:47 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x40096101, 0x0) 10:35:47 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) [ 103.376031][ T8725] QAT: failed to copy from user cfg_data. 10:35:47 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x40096101, 0x0) 10:35:47 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) io_setup(0x20000000001005, &(0x7f0000000880)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='rdma.max\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x1543, 0x9, 0x4}, {0x92bd, 0x5, 0x1, 0x200}, {0x0, 0xff, 0xf0, 0x8001}, {0x8, 0x0, 0x5}, {0x8001, 0xec, 0x62, 0x81}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x9}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8811, 0x3, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xb8) ptrace$pokeuser(0x6, r2, 0x388, 0x0) [ 103.418248][ T8735] QAT: failed to copy from user cfg_data. 10:35:47 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0x40405514, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x0, 0x0}) 10:35:47 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:47 executing program 0: ioctl$PIO_CMAP(0xffffffffffffffff, 0x40096101, 0x0) 10:35:47 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) 10:35:47 executing program 1: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:47 executing program 0: ioctl$PIO_CMAP(0xffffffffffffffff, 0x40096101, 0x0) 10:35:47 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:47 executing program 1: creat(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:47 executing program 0: ioctl$PIO_CMAP(0xffffffffffffffff, 0x40096101, 0x0) 10:35:47 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) 10:35:48 executing program 3: creat(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, 0x0) 10:35:48 executing program 1: creat(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:48 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x40096101, 0x0) 10:35:48 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) io_setup(0x20000000001005, &(0x7f0000000880)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='rdma.max\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x1543, 0x9, 0x4}, {0x92bd, 0x5, 0x1, 0x200}, {0x0, 0xff, 0xf0, 0x8001}, {0x8, 0x0, 0x5}, {0x8001, 0xec, 0x62, 0x81}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x9}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8811, 0x3, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xb8) ptrace$pokeuser(0x6, r2, 0x388, 0x0) 10:35:48 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) 10:35:48 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x40096101, 0x0) 10:35:48 executing program 3: creat(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:48 executing program 1: creat(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:48 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) 10:35:48 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x40096101, 0x0) 10:35:48 executing program 3: creat(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, 0x0) 10:35:48 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(0x0, 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:48 executing program 4: truncate(&(0x7f0000000240)='./file0\x00', 0x90002) 10:35:48 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(0x0, 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) [ 103.940047][ T38] audit: type=1800 audit(1575023748.242:100): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16570 res=0 [ 103.991977][ T38] audit: type=1800 audit(1575023748.282:101): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16619 res=0 10:35:48 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) io_setup(0x20000000001005, &(0x7f0000000880)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='rdma.max\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x1543, 0x9, 0x4}, {0x92bd, 0x5, 0x1, 0x200}, {0x0, 0xff, 0xf0, 0x8001}, {0x8, 0x0, 0x5}, {0x8001, 0xec, 0x62, 0x81}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x9}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8811, 0x3, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xb8) ptrace$pokeuser(0x6, r2, 0x388, 0x0) 10:35:48 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(0x0, 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:48 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x40096101, 0x0) 10:35:48 executing program 4: truncate(&(0x7f0000000240)='./file0\x00', 0x90002) 10:35:48 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(0x0, 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, 0x0) 10:35:48 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x40096101, 0x0) 10:35:48 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(0x0, 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) [ 104.080926][ T38] audit: type=1800 audit(1575023748.382:102): pid=8852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16629 res=0 10:35:48 executing program 4: truncate(&(0x7f0000000240)='./file0\x00', 0x90002) 10:35:48 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x40096101, 0x0) [ 104.120585][ T38] audit: type=1800 audit(1575023748.392:103): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16625 res=0 10:35:48 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:48 executing program 4: creat(0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) [ 104.168919][ T38] audit: type=1800 audit(1575023748.422:104): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16629 res=0 [ 104.211031][ T38] audit: type=1804 audit(1575023748.472:105): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir406801938/syzkaller.sr7Ii0/57/file0" dev="sda1" ino=16626 res=1 10:35:48 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) io_setup(0x20000000001005, &(0x7f0000000880)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='rdma.max\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x1543, 0x9, 0x4}, {0x92bd, 0x5, 0x1, 0x200}, {0x0, 0xff, 0xf0, 0x8001}, {0x8, 0x0, 0x5}, {0x8001, 0xec, 0x62, 0x81}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x9}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8811, 0x3, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xb8) ptrace$pokeuser(0x6, r2, 0x388, 0x0) 10:35:48 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(0x0, 0x40002, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:35:48 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:48 executing program 4: creat(0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) 10:35:48 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) io_setup(0x20000000001005, &(0x7f0000000880)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='rdma.max\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x1543, 0x9, 0x4}, {0x92bd, 0x5, 0x1, 0x200}, {0x0, 0xff, 0xf0, 0x8001}, {0x8, 0x0, 0x5}, {0x8001, 0xec, 0x62, 0x81}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x9}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8811, 0x3, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xb8) ptrace$pokeuser(0x6, r2, 0x388, 0x0) 10:35:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) 10:35:48 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:48 executing program 4: creat(0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) 10:35:48 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(0x0, 0x90002) 10:35:48 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) io_setup(0x20000000001005, &(0x7f0000000880)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='rdma.max\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x1543, 0x9, 0x4}, {0x92bd, 0x5, 0x1, 0x200}, {0x0, 0xff, 0xf0, 0x8001}, {0x8, 0x0, 0x5}, {0x8001, 0xec, 0x62, 0x81}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x9}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8811, 0x3, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xb8) ptrace$pokeuser(0x6, r2, 0x388, 0x0) 10:35:48 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(0x0, 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:35:48 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(0x0, 0x90002) 10:36:01 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) io_setup(0x20000000001005, &(0x7f0000000880)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='rdma.max\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x1543, 0x9, 0x4}, {0x92bd, 0x5, 0x1, 0x200}, {0x0, 0xff, 0xf0, 0x8001}, {0x8, 0x0, 0x5}, {0x8001, 0xec, 0x62, 0x81}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x9}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8811, 0x3, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) getpid() r2 = getpid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0xb8) 10:36:01 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(0x0, 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) 10:36:01 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(0x0, 0x90002) 10:36:01 executing program 0: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) io_setup(0x20000000001005, &(0x7f0000000880)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='rdma.max\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x1543, 0x9, 0x4}, {0x92bd, 0x5, 0x1, 0x200}, {0x0, 0xff, 0xf0, 0x8001}, {0x8, 0x0, 0x5}, {0x8001, 0xec, 0x62, 0x81}]}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x9}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8811, 0x3, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r2 = getpid() r3 = getpid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x16, &(0x7f0000000100)) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0xb8) ptrace$pokeuser(0x6, r2, 0x388, 0x0) 10:36:01 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) sendfile(r1, r1, &(0x7f0000000140)=0x8800, 0x8800000) 10:36:01 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0x40405514, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) [ 116.983842][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 116.983852][ T38] audit: type=1804 audit(1575023761.292:112): pid=8919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir158870408/syzkaller.6zMQUd/46/file0" dev="sda1" ino=16637 res=1 10:36:01 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x0) 10:36:01 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(0x0, 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r1, 0x0, 0x80000000) [ 117.076457][ T38] audit: type=1804 audit(1575023761.382:113): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir158870408/syzkaller.6zMQUd/46/file0" dev="sda1" ino=16637 res=1 [ 117.162984][ T38] audit: type=1804 audit(1575023761.472:114): pid=8940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir406801938/syzkaller.sr7Ii0/63/file0" dev="sda1" ino=16619 res=1 [ 117.199421][ T38] audit: type=1804 audit(1575023761.482:115): pid=8944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir158870408/syzkaller.6zMQUd/47/file0" dev="sda1" ino=16630 res=1 [ 117.232489][ T38] audit: type=1804 audit(1575023761.492:116): pid=8944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir158870408/syzkaller.6zMQUd/47/file0" dev="sda1" ino=16630 res=1 [ 117.268305][ T38] audit: type=1804 audit(1575023761.582:117): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir406801938/syzkaller.sr7Ii0/64/file0" dev="sda1" ino=16619 res=1 [ 117.346483][ T38] audit: type=1804 audit(1575023761.652:118): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir158870408/syzkaller.6zMQUd/48/file0" dev="sda1" ino=16619 res=1 [ 117.375289][ T38] audit: type=1804 audit(1575023761.662:119): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir158870408/syzkaller.6zMQUd/48/file0" dev="sda1" ino=16619 res=1 [ 125.181672][ C2] ------------[ cut here ]------------ [ 125.188222][ C2] NETDEV WATCHDOG: eth0 (e1000): transmit queue 0 timed out [ 125.199584][ C2] WARNING: CPU: 2 PID: 0 at net/sched/sch_generic.c:442 dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] Kernel panic - not syncing: panic_on_warn set ... [ 125.206995][ C2] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 5.4.0-syzkaller #0 [ 125.206995][ C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 [ 125.206995][ C2] Call Trace: [ 125.206995][ C2] [ 125.206995][ C2] dump_stack+0x197/0x210 [ 125.206995][ C2] ? dev_watchdog+0xa10/0xca0 [ 125.206995][ C2] panic+0x2e3/0x75c [ 125.206995][ C2] ? add_taint.cold+0x16/0x16 [ 125.206995][ C2] ? __kasan_check_write+0x14/0x20 [ 125.206995][ C2] ? __warn.cold+0x14/0x3e [ 125.206995][ C2] ? __warn+0xd9/0x1cf [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] __warn.cold+0x2f/0x3e [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] report_bug+0x289/0x300 [ 125.206995][ C2] do_error_trap+0x11b/0x200 [ 125.206995][ C2] do_invalid_op+0x37/0x50 [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] invalid_op+0x23/0x30 [ 125.206995][ C2] RIP: 0010:dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] Code: ff e8 5f 9e 8d fb 4c 89 e7 c6 05 c8 4b ff 03 01 e8 00 32 e8 ff 44 89 e9 4c 89 e6 48 c7 c7 c0 13 6d 88 48 89 c2 e8 ba 52 5e fb <0f> 0b e9 06 fd ff ff 48 8b 7d d0 e8 cb cb ca fb e9 7d f8 ff ff 48 [ 125.206995][ C2] RSP: 0018:ffff88802d709c98 EFLAGS: 00010286 [ 125.206995][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.206995][ C2] RDX: 0000000000000100 RSI: ffffffff815e4316 RDI: ffffed1005ae1385 [ 125.206995][ C2] RBP: ffff88802d709d00 R08: ffff88802c868380 R09: fffffbfff15377b3 [ 125.206995][ C2] R10: fffffbfff15377b2 R11: ffffffff8a9bbd97 R12: ffff888028de4000 [ 125.206995][ C2] R13: 0000000000000000 R14: ffff888028de44f8 R15: fffffffffffffecc [ 125.206995][ C2] ? vprintk_func+0x86/0x189 [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] call_timer_fn+0x1ac/0x780 [ 125.206995][ C2] ? pfifo_fast_reset+0x5b0/0x5b0 [ 125.206995][ C2] ? msleep_interruptible+0x150/0x150 [ 125.206995][ C2] ? run_timer_softirq+0x6b1/0x1790 [ 125.206995][ C2] ? trace_hardirqs_on+0x67/0x240 [ 125.206995][ C2] ? pfifo_fast_reset+0x5b0/0x5b0 [ 125.206995][ C2] ? pfifo_fast_reset+0x5b0/0x5b0 [ 125.206995][ C2] run_timer_softirq+0x6c3/0x1790 [ 125.206995][ C2] ? add_timer+0x930/0x930 [ 125.206995][ C2] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 125.206995][ C2] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 125.206995][ C2] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 125.206995][ C2] ? trace_hardirqs_on+0x67/0x240 [ 125.206995][ C2] __do_softirq+0x262/0x98c [ 125.206995][ C2] ? sched_clock_cpu+0x14e/0x1b0 [ 125.206995][ C2] irq_exit+0x19b/0x1e0 [ 125.206995][ C2] smp_apic_timer_interrupt+0x1a3/0x610 [ 125.206995][ C2] apic_timer_interrupt+0xf/0x20 [ 125.206995][ C2] [ 125.206995][ C2] RIP: 0010:native_safe_halt+0xe/0x10 [ 125.206995][ C2] Code: e8 54 35 fa eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d f4 bd 4b 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d e4 bd 4b 00 fb f4 cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 ae b8 e5 f9 e8 c9 [ 125.206995][ C2] RSP: 0018:ffff88802c877d68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 125.206995][ C2] RAX: 1ffffffff122668e RBX: ffff88802c868380 RCX: 0000000000000000 [ 125.206995][ C2] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff88802c868c14 [ 125.206995][ C2] RBP: ffff88802c877d98 R08: ffff88802c868380 R09: 0000000000000000 [ 125.206995][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 125.206995][ C2] R13: ffffffff89ea72c0 R14: 0000000000000000 R15: 0000000000000002 [ 125.206995][ C2] ? default_idle+0x4e/0x360 [ 125.206995][ C2] arch_cpu_idle+0xa/0x10 [ 125.206995][ C2] default_idle_call+0x84/0xb0 [ 125.206995][ C2] do_idle+0x3c8/0x6e0 [ 125.206995][ C2] ? __this_cpu_preempt_check+0x35/0x190 [ 125.206995][ C2] ? arch_cpu_idle_exit+0x80/0x80 [ 125.206995][ C2] cpu_startup_entry+0x1b/0x20 [ 125.206995][ C2] start_secondary+0x2f4/0x410 [ 125.206995][ C2] ? set_cpu_sibling_map+0x2140/0x2140 [ 125.206995][ C2] secondary_startup_64+0xa4/0xb0 [ 125.206995][ C2] ------------[ cut here ]------------ [ 125.206995][ C2] WARNING: CPU: 2 PID: 0 at kernel/locking/mutex.c:1419 mutex_trylock+0x279/0x2f0 [ 125.206995][ C2] Modules linked in: [ 125.206995][ C2] CPU: 2 PID: 0 Comm: swapper/2 Not tainted 5.4.0-syzkaller #0 [ 125.206995][ C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 [ 125.206995][ C2] RIP: 0010:mutex_trylock+0x279/0x2f0 [ 125.206995][ C2] Code: c9 41 b8 01 00 00 00 31 c9 ba 01 00 00 00 31 f6 e8 fc d2 de f9 58 48 8d 65 d8 b8 01 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 0c fe ff ff 48 c7 c7 e0 94 d2 8a 48 89 4d d0 e8 00 17 36 [ 125.206995][ C2] RSP: 0018:ffff88802d709858 EFLAGS: 00010006 [ 125.206995][ C2] RAX: 0000000000000103 RBX: 1ffff11005ae1313 RCX: 0000000000000004 [ 125.206995][ C2] RDX: 0000000000000100 RSI: ffffffff816bc9c5 RDI: ffffffff891c25a0 [ 125.206995][ C2] RBP: ffff88802d709888 R08: 0000000000000001 R09: fffffbfff123381d [ 125.206995][ C2] R10: fffffbfff123381c R11: ffffffff8919c0e3 R12: ffffffff8ad294e0 [ 125.206995][ C2] R13: 0000000000000000 R14: ffffffff85e73f00 R15: ffffffff891c25a0 [ 125.206995][ C2] FS: 0000000000000000(0000) GS:ffff88802d700000(0000) knlGS:0000000000000000 [ 125.206995][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.206995][ C2] CR2: ffffffffff600400 CR3: 000000007a592000 CR4: 00000000003406e0 [ 125.206995][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.206995][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.206995][ C2] Call Trace: [ 125.206995][ C2] [ 125.206995][ C2] ? dev_watchdog+0xa10/0xca0 [ 125.206995][ C2] __crash_kexec+0x91/0x200 [ 125.206995][ C2] ? kexec_crash_loaded+0x20/0x20 [ 125.206995][ C2] ? trace_hardirqs_off+0x62/0x240 [ 125.206995][ C2] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 125.206995][ C2] ? __printk_safe_flush+0x31e/0x3a0 [ 125.206995][ C2] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 125.206995][ C2] ? find_next_bit+0x107/0x130 [ 125.206995][ C2] ? cpumask_next+0x41/0x50 [ 125.206995][ C2] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 125.206995][ C2] ? printk_safe_flush+0xf2/0x140 [ 125.206995][ C2] ? dev_watchdog+0xa10/0xca0 [ 125.206995][ C2] panic+0x308/0x75c [ 125.206995][ C2] ? add_taint.cold+0x16/0x16 [ 125.206995][ C2] ? __kasan_check_write+0x14/0x20 [ 125.206995][ C2] ? __warn.cold+0x14/0x3e [ 125.206995][ C2] ? __warn+0xd9/0x1cf [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] __warn.cold+0x2f/0x3e [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] report_bug+0x289/0x300 [ 125.206995][ C2] do_error_trap+0x11b/0x200 [ 125.206995][ C2] do_invalid_op+0x37/0x50 [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] invalid_op+0x23/0x30 [ 125.206995][ C2] RIP: 0010:dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] Code: ff e8 5f 9e 8d fb 4c 89 e7 c6 05 c8 4b ff 03 01 e8 00 32 e8 ff 44 89 e9 4c 89 e6 48 c7 c7 c0 13 6d 88 48 89 c2 e8 ba 52 5e fb <0f> 0b e9 06 fd ff ff 48 8b 7d d0 e8 cb cb ca fb e9 7d f8 ff ff 48 [ 125.206995][ C2] RSP: 0018:ffff88802d709c98 EFLAGS: 00010286 [ 125.206995][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.206995][ C2] RDX: 0000000000000100 RSI: ffffffff815e4316 RDI: ffffed1005ae1385 [ 125.206995][ C2] RBP: ffff88802d709d00 R08: ffff88802c868380 R09: fffffbfff15377b3 [ 125.206995][ C2] R10: fffffbfff15377b2 R11: ffffffff8a9bbd97 R12: ffff888028de4000 [ 125.206995][ C2] R13: 0000000000000000 R14: ffff888028de44f8 R15: fffffffffffffecc [ 125.206995][ C2] ? vprintk_func+0x86/0x189 [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] call_timer_fn+0x1ac/0x780 [ 125.206995][ C2] ? pfifo_fast_reset+0x5b0/0x5b0 [ 125.206995][ C2] ? msleep_interruptible+0x150/0x150 [ 125.206995][ C2] ? run_timer_softirq+0x6b1/0x1790 [ 125.206995][ C2] ? trace_hardirqs_on+0x67/0x240 [ 125.206995][ C2] ? pfifo_fast_reset+0x5b0/0x5b0 [ 125.206995][ C2] ? pfifo_fast_reset+0x5b0/0x5b0 [ 125.206995][ C2] run_timer_softirq+0x6c3/0x1790 [ 125.206995][ C2] ? add_timer+0x930/0x930 [ 125.206995][ C2] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 125.206995][ C2] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 125.206995][ C2] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 125.206995][ C2] ? trace_hardirqs_on+0x67/0x240 [ 125.206995][ C2] __do_softirq+0x262/0x98c [ 125.206995][ C2] ? sched_clock_cpu+0x14e/0x1b0 [ 125.206995][ C2] irq_exit+0x19b/0x1e0 [ 125.206995][ C2] smp_apic_timer_interrupt+0x1a3/0x610 [ 125.206995][ C2] apic_timer_interrupt+0xf/0x20 [ 125.206995][ C2] [ 125.206995][ C2] RIP: 0010:native_safe_halt+0xe/0x10 [ 125.206995][ C2] Code: e8 54 35 fa eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d f4 bd 4b 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d e4 bd 4b 00 fb f4 cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 ae b8 e5 f9 e8 c9 [ 125.206995][ C2] RSP: 0018:ffff88802c877d68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 125.206995][ C2] RAX: 1ffffffff122668e RBX: ffff88802c868380 RCX: 0000000000000000 [ 125.206995][ C2] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff88802c868c14 [ 125.206995][ C2] RBP: ffff88802c877d98 R08: ffff88802c868380 R09: 0000000000000000 [ 125.206995][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 125.206995][ C2] R13: ffffffff89ea72c0 R14: 0000000000000000 R15: 0000000000000002 [ 125.206995][ C2] ? default_idle+0x4e/0x360 [ 125.206995][ C2] arch_cpu_idle+0xa/0x10 [ 125.206995][ C2] default_idle_call+0x84/0xb0 [ 125.206995][ C2] do_idle+0x3c8/0x6e0 [ 125.206995][ C2] ? __this_cpu_preempt_check+0x35/0x190 [ 125.206995][ C2] ? arch_cpu_idle_exit+0x80/0x80 [ 125.206995][ C2] cpu_startup_entry+0x1b/0x20 [ 125.206995][ C2] start_secondary+0x2f4/0x410 [ 125.206995][ C2] ? set_cpu_sibling_map+0x2140/0x2140 [ 125.206995][ C2] secondary_startup_64+0xa4/0xb0 [ 125.206995][ C2] irq event stamp: 475427 [ 125.206995][ C2] hardirqs last enabled at (475426): [] console_unlock+0x7b3/0xf00 [ 125.206995][ C2] hardirqs last disabled at (475427): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 125.206995][ C2] softirqs last enabled at (475166): [] _local_bh_enable+0x1c/0x30 [ 125.206995][ C2] softirqs last disabled at (475167): [] irq_exit+0x19b/0x1e0 [ 125.206995][ C2] ---[ end trace 006876d121933684 ]--- [ 125.206995][ C2] ------------[ cut here ]------------ [ 125.206995][ C2] WARNING: CPU: 2 PID: 0 at kernel/locking/mutex.c:737 mutex_unlock+0x1d/0x30 [ 125.206995][ C2] Modules linked in: [ 125.206995][ C2] CPU: 2 PID: 0 Comm: swapper/2 Tainted: G W 5.4.0-syzkaller #0 [ 125.206995][ C2] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1 04/01/2014 [ 125.206995][ C2] RIP: 0010:mutex_unlock+0x1d/0x30 [ 125.206995][ C2] Code: 4c 89 ff e8 55 22 36 fa e9 8c fb ff ff 55 65 8b 05 10 35 86 78 a9 00 ff 1f 00 48 89 e5 75 0b 48 8b 75 08 e8 45 f9 ff ff 5d c3 <0f> 0b 48 8b 75 08 e8 38 f9 ff ff 5d c3 66 0f 1f 44 00 00 48 b8 00 [ 125.206995][ C2] RSP: 0018:ffff88802d709888 EFLAGS: 00010006 [ 125.206995][ C2] RAX: 0000000000000103 RBX: 1ffff11005ae1313 RCX: ffffffff816bc9dd [ 125.206995][ C2] RDX: 0000000000000100 RSI: ffffffff816bca3f RDI: ffffffff891c25a0 [ 125.206995][ C2] RBP: ffff88802d709888 R08: ffff88802c868380 R09: fffffbfff15377bd [ 125.206995][ C2] R10: ffff88802c868c68 R11: ffff88802c868380 R12: 0000000000000001 [ 125.206995][ C2] R13: 0000000000000000 R14: ffffffff85e73f00 R15: 00000000000001ba [ 125.206995][ C2] FS: 0000000000000000(0000) GS:ffff88802d700000(0000) knlGS:0000000000000000 [ 125.206995][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.206995][ C2] CR2: ffffffffff600400 CR3: 000000007a592000 CR4: 00000000003406e0 [ 125.206995][ C2] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.206995][ C2] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.206995][ C2] Call Trace: [ 125.206995][ C2] [ 125.206995][ C2] __crash_kexec+0x10b/0x200 [ 125.206995][ C2] ? kexec_crash_loaded+0x20/0x20 [ 125.206995][ C2] ? trace_hardirqs_off+0x62/0x240 [ 125.206995][ C2] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 125.206995][ C2] ? __printk_safe_flush+0x31e/0x3a0 [ 125.206995][ C2] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 125.206995][ C2] ? find_next_bit+0x107/0x130 [ 125.206995][ C2] ? cpumask_next+0x41/0x50 [ 125.206995][ C2] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 125.206995][ C2] ? printk_safe_flush+0xf2/0x140 [ 125.206995][ C2] ? dev_watchdog+0xa10/0xca0 [ 125.206995][ C2] panic+0x308/0x75c [ 125.206995][ C2] ? add_taint.cold+0x16/0x16 [ 125.206995][ C2] ? __kasan_check_write+0x14/0x20 [ 125.206995][ C2] ? __warn.cold+0x14/0x3e [ 125.206995][ C2] ? __warn+0xd9/0x1cf [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] __warn.cold+0x2f/0x3e [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] report_bug+0x289/0x300 [ 125.206995][ C2] do_error_trap+0x11b/0x200 [ 125.206995][ C2] do_invalid_op+0x37/0x50 [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] invalid_op+0x23/0x30 [ 125.206995][ C2] RIP: 0010:dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] Code: ff e8 5f 9e 8d fb 4c 89 e7 c6 05 c8 4b ff 03 01 e8 00 32 e8 ff 44 89 e9 4c 89 e6 48 c7 c7 c0 13 6d 88 48 89 c2 e8 ba 52 5e fb <0f> 0b e9 06 fd ff ff 48 8b 7d d0 e8 cb cb ca fb e9 7d f8 ff ff 48 [ 125.206995][ C2] RSP: 0018:ffff88802d709c98 EFLAGS: 00010286 [ 125.206995][ C2] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 125.206995][ C2] RDX: 0000000000000100 RSI: ffffffff815e4316 RDI: ffffed1005ae1385 [ 125.206995][ C2] RBP: ffff88802d709d00 R08: ffff88802c868380 R09: fffffbfff15377b3 [ 125.206995][ C2] R10: fffffbfff15377b2 R11: ffffffff8a9bbd97 R12: ffff888028de4000 [ 125.206995][ C2] R13: 0000000000000000 R14: ffff888028de44f8 R15: fffffffffffffecc [ 125.206995][ C2] ? vprintk_func+0x86/0x189 [ 125.206995][ C2] ? dev_watchdog+0xaf5/0xca0 [ 125.206995][ C2] call_timer_fn+0x1ac/0x780 [ 125.206995][ C2] ? pfifo_fast_reset+0x5b0/0x5b0 [ 125.206995][ C2] ? msleep_interruptible+0x150/0x150 [ 125.206995][ C2] ? run_timer_softirq+0x6b1/0x1790 [ 125.206995][ C2] ? trace_hardirqs_on+0x67/0x240 [ 125.206995][ C2] ? pfifo_fast_reset+0x5b0/0x5b0 [ 125.206995][ C2] ? pfifo_fast_reset+0x5b0/0x5b0 [ 125.206995][ C2] run_timer_softirq+0x6c3/0x1790 [ 125.206995][ C2] ? add_timer+0x930/0x930 [ 125.206995][ C2] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 125.206995][ C2] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 125.206995][ C2] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 125.206995][ C2] ? trace_hardirqs_on+0x67/0x240 [ 125.206995][ C2] __do_softirq+0x262/0x98c [ 125.206995][ C2] ? sched_clock_cpu+0x14e/0x1b0 [ 125.206995][ C2] irq_exit+0x19b/0x1e0 [ 125.206995][ C2] smp_apic_timer_interrupt+0x1a3/0x610 [ 125.206995][ C2] apic_timer_interrupt+0xf/0x20 [ 125.206995][ C2] [ 125.206995][ C2] RIP: 0010:native_safe_halt+0xe/0x10 [ 125.206995][ C2] Code: e8 54 35 fa eb 8a cc cc cc cc cc cc e9 07 00 00 00 0f 00 2d f4 bd 4b 00 f4 c3 66 90 e9 07 00 00 00 0f 00 2d e4 bd 4b 00 fb f4 cc 55 48 89 e5 41 57 41 56 41 55 41 54 53 e8 ae b8 e5 f9 e8 c9 [ 125.206995][ C2] RSP: 0018:ffff88802c877d68 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13 [ 125.206995][ C2] RAX: 1ffffffff122668e RBX: ffff88802c868380 RCX: 0000000000000000 [ 125.206995][ C2] RDX: dffffc0000000000 RSI: 0000000000000006 RDI: ffff88802c868c14 [ 125.206995][ C2] RBP: ffff88802c877d98 R08: ffff88802c868380 R09: 0000000000000000 [ 125.206995][ C2] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 125.206995][ C2] R13: ffffffff89ea72c0 R14: 0000000000000000 R15: 0000000000000002 [ 125.206995][ C2] ? default_idle+0x4e/0x360 [ 125.206995][ C2] arch_cpu_idle+0xa/0x10 [ 125.206995][ C2] default_idle_call+0x84/0xb0 [ 125.206995][ C2] do_idle+0x3c8/0x6e0 [ 125.206995][ C2] ? __this_cpu_preempt_check+0x35/0x190 [ 125.206995][ C2] ? arch_cpu_idle_exit+0x80/0x80 [ 125.206995][ C2] cpu_startup_entry+0x1b/0x20 [ 125.206995][ C2] start_secondary+0x2f4/0x410 [ 125.206995][ C2] ? set_cpu_sibling_map+0x2140/0x2140 [ 125.206995][ C2] secondary_startup_64+0xa4/0xb0 [ 125.206995][ C2] irq event stamp: 475427 [ 125.206995][ C2] hardirqs last enabled at (475426): [] console_unlock+0x7b3/0xf00 [ 125.206995][ C2] hardirqs last disabled at (475427): [] trace_hardirqs_off_thunk+0x1a/0x1c [ 125.206995][ C2] softirqs last enabled at (475166): [] _local_bh_enable+0x1c/0x30 [ 125.206995][ C2] softirqs last disabled at (475167): [] irq_exit+0x19b/0x1e0 [ 125.206995][ C2] ---[ end trace 006876d121933685 ]--- [ 125.206995][ C2] Kernel Offset: disabled [ 125.206995][ C2] Rebooting in 86400 seconds..