[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 38.797578] random: sshd: uninitialized urandom read (32 bytes read) [ 38.988118] kauditd_printk_skb: 11 callbacks suppressed [ 38.988126] audit: type=1400 audit(1583305879.182:35): avc: denied { map } for pid=7311 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 39.045874] random: sshd: uninitialized urandom read (32 bytes read) [ 39.816119] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts. [ 45.413296] random: sshd: uninitialized urandom read (32 bytes read) 2020/03/04 07:11:25 fuzzer started [ 45.640189] audit: type=1400 audit(1583305885.832:36): avc: denied { map } for pid=7320 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 46.189357] random: cc1: uninitialized urandom read (8 bytes read) 2020/03/04 07:11:26 dialing manager at 10.128.0.105:40559 2020/03/04 07:11:27 syscalls: 2937 2020/03/04 07:11:27 code coverage: enabled 2020/03/04 07:11:27 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2020/03/04 07:11:27 extra coverage: extra coverage is not supported by the kernel 2020/03/04 07:11:27 setuid sandbox: enabled 2020/03/04 07:11:27 namespace sandbox: enabled 2020/03/04 07:11:27 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/04 07:11:27 fault injection: enabled 2020/03/04 07:11:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/04 07:11:27 net packet injection: enabled 2020/03/04 07:11:27 net device setup: enabled 2020/03/04 07:11:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/03/04 07:11:27 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 47.974598] random: crng init done 07:14:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 07:14:12 executing program 0: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000001900)={{0x100000080}, 'port0\x00', 0x7b}) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x80}, {0x80}}) 07:14:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:12 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) 07:14:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x26}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 212.482139] audit: type=1400 audit(1583306052.682:37): avc: denied { map } for pid=7338 comm="syz-executor.2" path="/sys/kernel/debug/kcov" dev="debugfs" ino=22 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 07:14:12 executing program 4: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3f) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfa}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$cont(0x9, r1, 0x0, 0x0) [ 212.891068] IPVS: ftp: loaded support on port[0] = 21 [ 213.653187] IPVS: ftp: loaded support on port[0] = 21 [ 213.690309] chnl_net:caif_netlink_parms(): no params data found [ 213.742629] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.749178] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.756459] device bridge_slave_0 entered promiscuous mode [ 213.775288] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.782144] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.789020] device bridge_slave_1 entered promiscuous mode [ 213.812077] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 213.823356] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 213.846725] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 213.854165] team0: Port device team_slave_0 added [ 213.864880] IPVS: ftp: loaded support on port[0] = 21 [ 213.874062] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 213.881471] team0: Port device team_slave_1 added [ 213.906690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.913050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.938535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.963711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.969995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.995801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.019665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 214.035755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.112549] device hsr_slave_0 entered promiscuous mode [ 214.160358] device hsr_slave_1 entered promiscuous mode [ 214.244576] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 214.251680] chnl_net:caif_netlink_parms(): no params data found [ 214.267021] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 214.312530] IPVS: ftp: loaded support on port[0] = 21 [ 214.404026] chnl_net:caif_netlink_parms(): no params data found [ 214.453516] IPVS: ftp: loaded support on port[0] = 21 [ 214.472911] audit: type=1400 audit(1583306054.672:38): avc: denied { create } for pid=7343 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 214.501543] audit: type=1400 audit(1583306054.672:39): avc: denied { write } for pid=7343 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 214.525512] audit: type=1400 audit(1583306054.702:40): avc: denied { read } for pid=7343 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 214.548495] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.556528] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.564656] device bridge_slave_0 entered promiscuous mode [ 214.598532] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.605114] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.612144] device bridge_slave_1 entered promiscuous mode [ 214.633588] chnl_net:caif_netlink_parms(): no params data found [ 214.666717] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.697353] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.721134] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.727578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.734662] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.741072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.754787] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.762890] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.776507] IPVS: ftp: loaded support on port[0] = 21 [ 214.807872] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.816254] team0: Port device team_slave_0 added [ 214.822383] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.828742] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.836909] device bridge_slave_0 entered promiscuous mode [ 214.857255] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.864435] team0: Port device team_slave_1 added [ 214.869482] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.876275] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.883359] device bridge_slave_1 entered promiscuous mode [ 214.958973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.965512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.990813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.007046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.013340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.038655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.053471] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.063428] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.084933] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.095404] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 215.119441] chnl_net:caif_netlink_parms(): no params data found [ 215.149652] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.156339] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.163793] device bridge_slave_0 entered promiscuous mode [ 215.171706] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.178802] team0: Port device team_slave_0 added [ 215.188914] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.197412] team0: Port device team_slave_1 added [ 215.217140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.223475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.248872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.292475] device hsr_slave_0 entered promiscuous mode [ 215.330298] device hsr_slave_1 entered promiscuous mode [ 215.370388] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.376783] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.383892] device bridge_slave_1 entered promiscuous mode [ 215.411350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.417637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.443549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.453772] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 215.474013] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.492045] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.499568] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 215.514018] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.537619] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 215.552721] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 215.559930] team0: Port device team_slave_0 added [ 215.602151] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 215.609384] team0: Port device team_slave_1 added [ 215.629773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.636387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.661937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.675084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.734813] device hsr_slave_0 entered promiscuous mode [ 215.800394] device hsr_slave_1 entered promiscuous mode [ 215.890509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.896772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.921984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.934217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 215.944275] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 215.951751] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 215.994311] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 216.001638] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 216.082831] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 216.153023] device hsr_slave_0 entered promiscuous mode [ 216.200364] device hsr_slave_1 entered promiscuous mode [ 216.243837] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 216.251101] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.257490] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.264531] device bridge_slave_0 entered promiscuous mode [ 216.271122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.278662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.295815] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 216.316053] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.322625] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.329592] device bridge_slave_1 entered promiscuous mode [ 216.337312] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 216.343455] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.349563] chnl_net:caif_netlink_parms(): no params data found [ 216.389148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.417045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.425625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.433487] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.439839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.451308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.465108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.475270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.482999] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.489342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.503793] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.520978] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 216.528760] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 216.550799] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.564778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.575499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 216.609024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.651316] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 216.658667] team0: Port device team_slave_0 added [ 216.665496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 216.679869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 216.698444] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 216.706541] team0: Port device team_slave_1 added [ 216.712260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.720713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.728169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.735973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.743997] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.751976] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 216.762468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 216.797726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.804394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.830429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.840749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.848252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.880520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 216.888103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.898433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.923791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.934493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 216.942055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.949548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.965656] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.972149] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.979099] device bridge_slave_0 entered promiscuous mode [ 216.986295] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.992791] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.999791] device bridge_slave_1 entered promiscuous mode [ 217.014262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.029307] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 217.036463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.055317] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.124584] device hsr_slave_0 entered promiscuous mode [ 217.170354] device hsr_slave_1 entered promiscuous mode [ 217.211209] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 217.218525] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 217.229899] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.259061] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 217.266655] team0: Port device team_slave_0 added [ 217.285769] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.293723] team0: Port device team_slave_1 added [ 217.309154] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 217.322049] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 217.359418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.374222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.380806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.406368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.418503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.428790] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 217.437762] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.448189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.454688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.480420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.493645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.500437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.518918] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 217.526268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 217.536247] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 217.551265] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.591468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.598849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.610714] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 217.616850] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.624092] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 217.633255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.694466] device hsr_slave_0 entered promiscuous mode [ 217.730390] device hsr_slave_1 entered promiscuous mode [ 217.780660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.787732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.799604] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 217.806021] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.813439] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 217.826106] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 217.835373] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.843905] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 217.858427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.866109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.874238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.882316] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.888663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.895806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.903614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.911480] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.917847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.925426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.932534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.942362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.955082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.967747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.976964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.984961] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.991352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.998424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.006295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.014036] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.020429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.029594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 218.043926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.068406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.078742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 218.096873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.110110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.117827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.128890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.147352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 218.156210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.165885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.174142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.184371] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 218.192256] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.204498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.211737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.219632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.230608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 218.241057] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 218.252113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 218.269806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.277129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.285812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.294007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.301684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.309110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.316767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.325172] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 218.337332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 218.346528] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 218.362410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.370613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.378166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.385451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.402638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 218.416222] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 218.423034] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.435425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.446662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.461299] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 218.468372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.476393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 218.485358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.496081] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 218.502611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.510577] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 218.523354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 218.535340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.547684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.555782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.563927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.572210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.579915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.587887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.595618] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.602003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.615360] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 218.625857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 218.640268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.647450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.655870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.665519] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.671938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.681549] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 218.691778] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.698470] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 218.717523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.725977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.736013] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 218.744656] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 218.753144] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 218.759436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.767250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.774721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.782925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.789777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.799177] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 218.808744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.822209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.831450] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 218.837520] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.851563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.858249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.885829] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 218.894570] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 218.903886] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 218.913954] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 218.923409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.935084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.946553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 218.956207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 218.967715] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 218.978796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.986824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.999582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.007637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.015766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.023444] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.029780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.037211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.044547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.054805] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 219.064706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 219.073879] device veth0_vlan entered promiscuous mode [ 219.080709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.087757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.095684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.103900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.112997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.120556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.128212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.136170] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.142548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.153115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 219.161199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.168679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.179393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 219.189586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 219.200340] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 219.206370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.220360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.228062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.243365] device veth1_vlan entered promiscuous mode [ 219.258938] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 219.274949] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 219.285700] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 219.296804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.305204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.314059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.322046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.334965] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 219.347442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 219.373846] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 219.381400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.388332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.396372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.405917] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 219.419417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.429943] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 219.448064] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 219.456297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.469486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.476429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.484325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.497613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.509548] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 219.521796] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 219.533605] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 219.541854] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 219.548546] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 219.556211] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 219.564426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.572096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.578963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.586949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.597175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 219.609842] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 219.618734] device veth0_macvtap entered promiscuous mode [ 219.628516] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 219.637469] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 219.644345] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.650888] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.659123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.666824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.674858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.682474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.693331] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 219.699468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.711242] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 219.723203] device veth1_macvtap entered promiscuous mode [ 219.729654] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 219.736737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.748916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.757181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.764707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.774738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.783919] device veth0_vlan entered promiscuous mode [ 219.797324] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 219.807240] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 219.825782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 219.835475] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 219.851331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 219.860355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.868163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.877806] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.884223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.892413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.899083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.906356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.916165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 219.928290] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 219.936683] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 219.943711] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 219.951053] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 219.958302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.969549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.978212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.989375] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.995788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.003566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.011341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.023484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 220.034776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.045153] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 220.059960] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 220.067504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.076620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.084156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.091991] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.098967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.107994] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 220.114977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.128683] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 220.137889] device veth1_vlan entered promiscuous mode [ 220.149425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 220.164838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.173024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.181314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.189122] device veth0_vlan entered promiscuous mode [ 220.201150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 220.248015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.269938] device veth1_vlan entered promiscuous mode [ 220.277701] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 220.289919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 220.304296] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 220.315602] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.327319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.341940] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.349875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.358302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.366610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.376236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 220.386222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 220.396090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.407863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.415707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.423825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.438108] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 220.447892] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 220.461657] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 220.469368] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 220.478210] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 220.488923] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 220.496071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.509934] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 220.523308] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 220.531894] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 220.541421] device veth0_vlan entered promiscuous mode [ 220.555134] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 220.565532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.577032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.584710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.592150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.599839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.607645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 220.615593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.623604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 220.631281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 220.650645] device veth0_macvtap entered promiscuous mode [ 220.657334] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 220.667456] device veth1_vlan entered promiscuous mode [ 220.673554] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 220.686521] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 220.702309] device veth1_macvtap entered promiscuous mode [ 220.708416] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 220.722529] device veth0_macvtap entered promiscuous mode [ 220.728844] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 220.736486] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 220.752815] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 220.763269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 220.774620] device veth1_macvtap entered promiscuous mode [ 220.784159] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 220.794642] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 220.804098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 220.813672] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 220.829496] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 220.838326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 220.852850] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 220.865824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 220.873973] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.881699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.888878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.896235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.903790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.911253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.917992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.926584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.945343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.958031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 220.977150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.002155] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 221.009228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.027627] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 221.065869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.074643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.096405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.114074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.135175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 221.155852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 221.173306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.192092] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 221.200632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.216313] device veth0_macvtap entered promiscuous mode [ 221.223139] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 221.236709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.246605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.257027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.269287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.282197] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 221.289223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.305144] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 221.318401] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 221.325409] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 221.332093] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 221.339376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.347287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.356519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.364755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.381480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 221.395982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.405302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 221.415230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.425434] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 221.433186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.441297] device veth1_macvtap entered promiscuous mode [ 221.450646] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 221.458570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.467786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.475879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.483470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.498344] device veth0_vlan entered promiscuous mode [ 221.521752] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 221.529374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.538730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.547716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 221.565227] device veth1_vlan entered promiscuous mode [ 221.571629] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 221.583235] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 221.593045] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.601151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.609206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.622526] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 221.636124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 221.661685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.678981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.689431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.699915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.709205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 221.720065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 07:14:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000ec1000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000bcefe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) [ 221.730424] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 221.737384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.760878] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 221.769599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.779043] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.807987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.836948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 221.847120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.856901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 221.867506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.878756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 221.889204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.903419] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 221.911488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.925028] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready 07:14:22 executing program 2: [ 221.933894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.960266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.968153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.978164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.993495] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 222.001520] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready 07:14:22 executing program 2: 07:14:22 executing program 2: [ 222.008394] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 222.026496] device veth0_macvtap entered promiscuous mode [ 222.037405] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready 07:14:22 executing program 2: [ 222.089441] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 222.099650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.118163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 07:14:22 executing program 2: 07:14:22 executing program 2: [ 222.136872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.152898] device veth1_macvtap entered promiscuous mode [ 222.165962] device veth0_vlan entered promiscuous mode [ 222.174599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.203137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.222462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 222.238204] device veth1_vlan entered promiscuous mode [ 222.258968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 222.299631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.310277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.319512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.330251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.339368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.349165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.358324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.368084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.378868] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 222.388445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.403042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.425666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 07:14:22 executing program 0: [ 222.456070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.474278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.487939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.503160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.512539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.523085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.533776] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 222.540936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.548295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.556382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.564630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.572367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.581905] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 222.601703] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 222.613272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.622354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.637375] device veth0_macvtap entered promiscuous mode [ 222.644581] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 222.660465] device veth1_macvtap entered promiscuous mode [ 222.666973] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 222.677583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 222.689151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 222.699648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.709659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.719868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.730155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.739293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.749054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.758190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.768102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.777297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 222.787249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.798189] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 222.805393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.819298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.827226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.834713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.842881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.852365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.863490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.873874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.883692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.893087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.902822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.911959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.921816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.930990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 222.940761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.952586] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 222.959510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.968957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.977432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.123773] attempt to access beyond end of device [ 223.128887] loop5: rw=2049, want=78, limit=63 [ 223.136134] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 223.144728] attempt to access beyond end of device [ 223.149677] loop5: rw=2049, want=79, limit=63 [ 223.155200] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 223.163185] attempt to access beyond end of device [ 223.168427] loop5: rw=2049, want=80, limit=63 [ 223.174019] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 223.182431] attempt to access beyond end of device [ 223.187377] loop5: rw=2049, want=81, limit=63 [ 223.193653] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 223.202214] attempt to access beyond end of device [ 223.207147] loop5: rw=2049, want=130, limit=63 [ 223.213335] attempt to access beyond end of device [ 223.218318] loop5: rw=2049, want=78, limit=63 [ 223.223885] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 223.232195] attempt to access beyond end of device [ 223.237158] loop5: rw=2049, want=79, limit=63 [ 223.241713] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 223.249446] attempt to access beyond end of device [ 223.254863] loop5: rw=2049, want=80, limit=63 [ 223.259354] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 223.267624] attempt to access beyond end of device [ 223.272635] loop5: rw=2049, want=81, limit=63 [ 223.277239] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 223.290742] attempt to access beyond end of device [ 223.295859] loop5: rw=2049, want=78, limit=63 [ 223.301495] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 223.309265] attempt to access beyond end of device [ 223.314928] loop5: rw=2049, want=79, limit=63 [ 223.319512] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 223.327651] attempt to access beyond end of device [ 223.333236] loop5: rw=2049, want=80, limit=63 [ 223.337775] attempt to access beyond end of device [ 223.342797] loop5: rw=2049, want=81, limit=63 [ 223.347384] attempt to access beyond end of device [ 223.353876] loop5: rw=2049, want=130, limit=63 [ 223.359136] attempt to access beyond end of device [ 223.364401] loop5: rw=2049, want=78, limit=63 [ 223.368954] attempt to access beyond end of device 07:14:23 executing program 2: 07:14:23 executing program 3: [ 223.374042] loop5: rw=2049, want=79, limit=63 [ 223.378575] attempt to access beyond end of device [ 223.383994] loop5: rw=2049, want=80, limit=63 [ 223.388535] attempt to access beyond end of device [ 223.393737] loop5: rw=2049, want=81, limit=63 07:14:24 executing program 0: 07:14:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:24 executing program 2: 07:14:24 executing program 3: 07:14:24 executing program 1: 07:14:24 executing program 4: 07:14:24 executing program 4: 07:14:24 executing program 2: 07:14:24 executing program 3: [ 224.635257] attempt to access beyond end of device [ 224.640510] loop5: rw=2049, want=78, limit=63 [ 224.645221] attempt to access beyond end of device 07:14:24 executing program 0: [ 224.682991] loop5: rw=2049, want=79, limit=63 07:14:24 executing program 2: 07:14:24 executing program 4: 07:14:24 executing program 3: [ 224.730937] attempt to access beyond end of device [ 224.762190] loop5: rw=2049, want=80, limit=63 [ 224.786064] attempt to access beyond end of device [ 224.819798] loop5: rw=2049, want=81, limit=63 [ 224.835307] attempt to access beyond end of device [ 224.848991] loop5: rw=2049, want=114, limit=63 [ 224.864468] attempt to access beyond end of device 07:14:25 executing program 3: 07:14:25 executing program 0: 07:14:25 executing program 2: 07:14:25 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 07:14:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:25 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)) [ 224.869515] loop5: rw=2049, want=78, limit=63 [ 224.875360] attempt to access beyond end of device [ 224.880484] loop5: rw=2049, want=79, limit=63 [ 224.885115] attempt to access beyond end of device [ 224.890673] loop5: rw=2049, want=80, limit=63 [ 224.895276] attempt to access beyond end of device [ 224.904717] loop5: rw=2049, want=81, limit=63 07:14:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40086310, {0x0, 0x0, 0x40046304, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x8126000, 0x0}) 07:14:25 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000100), &(0x7f0000000340)}, 0x20) 07:14:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) [ 224.987821] audit: type=1804 audit(1583306065.182:41): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir337944623/syzkaller.qdEmRU/2/bus" dev="sda1" ino=16557 res=1 [ 225.018425] audit: type=1804 audit(1583306065.212:42): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir337944623/syzkaller.qdEmRU/2/bus" dev="sda1" ino=16557 res=1 07:14:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) read$snddsp(0xffffffffffffffff, &(0x7f00000002c0)=""/87, 0x57) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000001440)={0x0, "b4b7359b0a0385dab52bf490c77863c8a17d804b6ad983b0560ded1ad563ab6cd3952bf6e3df9e28adcd0e8f492fda63721fe09d572208c770e741356613089fa27a2de0b8862e6c5f1ec9e84db2103a687040ac9d4af5128c9317de33bd5f9e80a11679bec08373ceacec6013dd135dba1c386f7b92bc21af5d107b2f45c38056a19a35e67c9d072d36b399503975bfcb062112047453affa0c334df6b9049ecdc18fd7776a0d1e47bd7f6fd6b11b0e8344f20546a0818830cb78d2ec6f78d0e1a6e2ffbab14c1133a85150b5c8ef32a1ff81c1b412326d2dd450cfe3523454bbc10aec086dca60e875615402e3ce2dba5a1b164cfabd8744bdfffb1114c04b465b89a7a0e260be8214d7ee34cb21ed85e0a2ed7a8ca64bd5185c29a60d3ab13c93060d9ddfc11e2ec080a07c7acafae5c9afd08149c98f6558102c3723fe5479a8e38d1c53951c6c906b32c4c40c3473304f338119ce85c898842869d505263ceb6c2725497d299487d2f31a21a5950bdd539ea3f40b888521d70ea52e7b86b0955cb88cb6ac85fdba51d2bfc45aebb4983cbabaa3d48f178e84c41b4462e3bcce3a321cdb65d6133f8c6ac909261f191426afe851529b7cef7a6964977a3e9c9cd02b43301db1bd9bf0945da835636e2e5a621e2347178fe89d5518115217e542afbb6235f786cb20489bab914ba5f1533480ef6308aa575e8ab8003a1c54"}) 07:14:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) 07:14:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x40001ff, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05030e0040063e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3c90, 0x0, 0x0, 0x1d3) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 07:14:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) sendfile(r0, r1, 0x0, 0x80000005) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 225.191471] attempt to access beyond end of device [ 225.207510] loop5: rw=2049, want=78, limit=63 [ 225.227722] attempt to access beyond end of device 07:14:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) [ 225.257281] loop5: rw=2049, want=79, limit=63 [ 225.275741] attempt to access beyond end of device [ 225.298360] hrtimer: interrupt took 46052 ns [ 225.303823] loop5: rw=2049, want=80, limit=63 [ 225.316630] attempt to access beyond end of device [ 225.331129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=7761 comm=syz-executor.1 07:14:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) [ 225.348293] loop5: rw=2049, want=81, limit=63 [ 225.354759] attempt to access beyond end of device [ 225.367091] loop5: rw=2049, want=130, limit=63 [ 225.393781] attempt to access beyond end of device [ 225.402844] loop5: rw=2049, want=78, limit=63 [ 225.410859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14392 sclass=netlink_route_socket pig=7761 comm=syz-executor.1 [ 225.414943] attempt to access beyond end of device 07:14:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40086310, {0x0, 0x0, 0x2, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x8126000, 0x0}) 07:14:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) [ 225.439876] loop5: rw=2049, want=79, limit=63 [ 225.459972] attempt to access beyond end of device [ 225.474424] loop5: rw=2049, want=80, limit=63 [ 225.482396] attempt to access beyond end of device [ 225.487562] loop5: rw=2049, want=81, limit=63 07:14:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x4, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) [ 225.533263] binder: 7775:7776 unknown command 2 [ 225.538191] binder: 7775:7776 ioctl c0306201 20000080 returned -22 07:14:25 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:25 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x8}, 0xa) [ 225.564549] audit: type=1400 audit(1583306065.762:43): avc: denied { create } for pid=7778 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 225.685056] attempt to access beyond end of device [ 225.699662] loop5: rw=2049, want=78, limit=63 [ 225.711305] audit: type=1400 audit(1583306065.762:44): avc: denied { write } for pid=7778 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 225.737880] attempt to access beyond end of device [ 225.756715] loop5: rw=2049, want=79, limit=63 [ 225.765103] attempt to access beyond end of device [ 225.773236] loop5: rw=2049, want=80, limit=63 [ 225.777950] attempt to access beyond end of device [ 225.783528] loop5: rw=2049, want=81, limit=63 [ 225.788230] attempt to access beyond end of device [ 225.793847] loop5: rw=2049, want=130, limit=63 [ 225.799068] attempt to access beyond end of device [ 225.810399] loop5: rw=2049, want=78, limit=63 [ 225.819545] attempt to access beyond end of device [ 225.825526] loop5: rw=2049, want=79, limit=63 [ 225.830961] attempt to access beyond end of device 07:14:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) read$snddsp(0xffffffffffffffff, &(0x7f00000002c0)=""/87, 0x57) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000001440)={0x0, "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"}) 07:14:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, 0x0) sendfile(r0, r1, 0x0, 0x80000005) 07:14:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8c0000008070b0b7be42d8419fe81def2e9fc71237bf00"/32, 0x20) 07:14:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1000000000001e, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, &(0x7f0000000040)=0x2, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 07:14:26 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) [ 225.836119] loop5: rw=2049, want=80, limit=63 [ 225.841324] attempt to access beyond end of device [ 225.850940] loop5: rw=2049, want=81, limit=63 07:14:26 executing program 3: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) [ 225.942199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=7804 comm=syz-executor.1 07:14:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) [ 225.985944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14392 sclass=netlink_route_socket pig=7804 comm=syz-executor.1 07:14:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x10000000}) read$snddsp(0xffffffffffffffff, &(0x7f00000002c0)=""/87, 0x57) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000001440)={0x0, "b4b7359b0a0385dab52bf490c77863c8a17d804b6ad983b0560ded1ad563ab6cd3952bf6e3df9e28adcd0e8f492fda63721fe09d572208c770e741356613089fa27a2de0b8862e6c5f1ec9e84db2103a687040ac9d4af5128c9317de33bd5f9e80a11679bec08373ceacec6013dd135dba1c386f7b92bc21af5d107b2f45c38056a19a35e67c9d072d36b399503975bfcb062112047453affa0c334df6b9049ecdc18fd7776a0d1e47bd7f6fd6b11b0e8344f20546a0818830cb78d2ec6f78d0e1a6e2ffbab14c1133a85150b5c8ef32a1ff81c1b412326d2dd450cfe3523454bbc10aec086dca60e875615402e3ce2dba5a1b164cfabd8744bdfffb1114c04b465b89a7a0e260be8214d7ee34cb21ed85e0a2ed7a8ca64bd5185c29a60d3ab13c93060d9ddfc11e2ec080a07c7acafae5c9afd08149c98f6558102c3723fe5479a8e38d1c53951c6c906b32c4c40c3473304f338119ce85c898842869d505263ceb6c2725497d299487d2f31a21a5950bdd539ea3f40b888521d70ea52e7b86b0955cb88cb6ac85fdba51d2bfc45aebb4983cbabaa3d48f178e84c41b4462e3bcce3a321cdb65d6133f8c6ac909261f191426afe851529b7cef7a6964977a3e9c9cd02b43301db1bd9bf0945da835636e2e5a621e2347178fe89d5518115217e542afbb6235f786cb20489bab914ba5f1533480ef6308aa575e8ab8003a1c54"}) 07:14:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) [ 226.037655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=7819 comm=syz-executor.1 07:14:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0xa00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, 0x0) sendfile(r0, r1, 0x0, 0x80000005) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0xf2, 0x0) acct(&(0x7f0000000100)='./file0\x00') ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x3}}, 0x18) 07:14:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) [ 226.248085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=7834 comm=syz-executor.1 [ 226.355466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14392 sclass=netlink_route_socket pig=7834 comm=syz-executor.1 07:14:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 07:14:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40406301, {0x0, 0x0, 0x2, 0x40406300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x8126000, 0x0}) 07:14:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10b3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) 07:14:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 07:14:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:26 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4003}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) 07:14:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/99}, @fda, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/113}}, &(0x7f00000001c0)}}], 0xffffffffffffffc3, 0x0, 0x0}) 07:14:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) [ 226.746065] binder: 7878:7883 ioctl c0306201 20000480 returned -14 07:14:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10b3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) 07:14:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)={0x10000000}) read$snddsp(0xffffffffffffffff, &(0x7f00000002c0)=""/87, 0x57) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000001440)={0x0, "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"}) 07:14:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 07:14:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x0, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:27 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x0, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:27 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000080), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000100), &(0x7f0000000340)}, 0x20) 07:14:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000980), 0x10b3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe) 07:14:27 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:27 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x0, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)={0x10000000}) read$snddsp(0xffffffffffffffff, &(0x7f00000002c0)=""/87, 0x57) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000001440)={0x0, "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"}) 07:14:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x401, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) recvmmsg(r0, &(0x7f00000001c0), 0x40000000000025c, 0xea225aec34b1dd0e, 0x0) 07:14:28 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:28 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x0, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:28 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:28 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x0, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) [ 228.073036] attempt to access beyond end of device [ 228.133499] loop5: rw=2049, want=78, limit=63 07:14:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x0, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:28 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) [ 228.158191] buffer_io_error: 30 callbacks suppressed [ 228.158200] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 228.181745] attempt to access beyond end of device 07:14:28 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) [ 228.209180] loop5: rw=2049, want=79, limit=63 [ 228.232991] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 228.245896] attempt to access beyond end of device [ 228.269478] loop5: rw=2049, want=80, limit=63 [ 228.284352] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 228.316246] attempt to access beyond end of device [ 228.326553] loop5: rw=2049, want=81, limit=63 [ 228.331851] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 228.339663] attempt to access beyond end of device [ 228.345037] loop5: rw=2049, want=114, limit=63 [ 228.350478] attempt to access beyond end of device [ 228.355665] loop5: rw=2049, want=78, limit=63 [ 228.360924] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 228.368784] attempt to access beyond end of device [ 228.374359] loop5: rw=2049, want=79, limit=63 07:14:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0xfffffffffffffffe, 0x6, @link_local}, 0x2f) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000240)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x78}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000280)={'gretap0\x00', {0x2, 0x0, @remote}}) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 07:14:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @none}, 0x8) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0xc201) dup3(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r4, &(0x7f0000003380)=[{{&(0x7f0000000a40)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c0801e001010000000000000000006ea094143ea2e0517b07027cbd3349925072a863cbde9ebb9c06d548392916f77461da5e3fd53c12f3572ac0be7442c73c739de3fc9249a42ebc13ca59564f5039c0562cef54969103c4cb93c24911877a4aa96d9b17f452eb"], 0x20}}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000140)={'ipvlan1\x00', {0x2, 0x4e23, @multicast1}}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 07:14:28 executing program 0: r0 = dup(0xffffffffffffffff) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:28 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 228.378987] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 228.387761] attempt to access beyond end of device [ 228.393226] loop5: rw=2049, want=80, limit=63 [ 228.397817] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 228.407063] attempt to access beyond end of device [ 228.412212] loop5: rw=2049, want=81, limit=63 [ 228.416805] Buffer I/O error on dev loop5, logical block 80, lost async page write 07:14:28 executing program 0: r0 = dup(0xffffffffffffffff) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:28 executing program 1: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:28 executing program 0: r0 = dup(0xffffffffffffffff) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:28 executing program 1: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0xfffffffffffffffe, 0x6, @link_local}, 0x2f) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000240)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x78}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000280)={'gretap0\x00', {0x2, 0x0, @remote}}) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 07:14:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 07:14:29 executing program 1: syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8126000, 0x0}) 07:14:29 executing program 2: bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000780200000000004c00000000080100000000000008010000e0010000e0010000e0010000e0010000e00100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a085e4620a4ae9700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d80008010000000000000000000000000000000000000000280073746174650000000000000000000000000000000000000000000000000000000000000000004000636f6e6e6c696d697400000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000000000000000000000000000e0000001ac1414aa00000000000000007663616e30000000000000000000000076657468305f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000000000000000000000000000000000006800435400000000000000000000000000000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004"], 0x2d8) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) geteuid() setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000001180)='fdinfo/3\x00') lremovexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'user.', 'connlimit\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000000e6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x301000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4005) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 07:14:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 07:14:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) [ 229.468550] attempt to access beyond end of device [ 229.500284] loop5: rw=2049, want=78, limit=63 07:14:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) [ 229.522237] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 229.561113] attempt to access beyond end of device 07:14:29 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:29 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0xc201) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={'ipvlan1\x00', {0x2, 0x4e23, @multicast1}}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 07:14:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) [ 229.567751] binder: 8054:8059 ioctl c0046209 0 returned -22 [ 229.585888] loop5: rw=2049, want=79, limit=63 [ 229.610667] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 229.663130] attempt to access beyond end of device [ 229.690877] loop5: rw=2049, want=80, limit=63 [ 229.703789] binder: 8068:8070 ioctl c0046209 0 returned -22 [ 229.718578] attempt to access beyond end of device [ 229.734459] loop5: rw=2049, want=81, limit=63 [ 229.750818] attempt to access beyond end of device [ 229.771486] loop5: rw=2049, want=130, limit=63 [ 229.782398] attempt to access beyond end of device [ 229.787482] loop5: rw=2049, want=78, limit=63 [ 229.796730] attempt to access beyond end of device [ 229.823590] loop5: rw=2049, want=79, limit=63 [ 229.847588] attempt to access beyond end of device [ 229.871514] loop5: rw=2049, want=80, limit=63 [ 229.892065] attempt to access beyond end of device [ 229.913317] loop5: rw=2049, want=81, limit=63 [ 229.981483] attempt to access beyond end of device [ 230.013383] loop5: rw=2049, want=130, limit=63 07:14:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0xfffffffffffffffe, 0x6, @link_local}, 0x2f) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000240)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x78}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000280)={'gretap0\x00', {0x2, 0x0, @remote}}) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 07:14:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 07:14:30 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = dup(0xffffffffffffffff) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 07:14:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10b3) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 230.357867] binder: 8083:8088 ioctl c0046209 0 returned -22 07:14:30 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = dup(0xffffffffffffffff) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) [ 230.400100] attempt to access beyond end of device 07:14:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0xc201) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={'ipvlan1\x00', {0x2, 0x4e23, @multicast1}}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 07:14:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000440)) [ 230.471010] loop5: rw=2049, want=78, limit=63 [ 230.501873] attempt to access beyond end of device 07:14:30 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = dup(0xffffffffffffffff) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10b3) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 230.532126] loop5: rw=2049, want=79, limit=63 [ 230.532190] attempt to access beyond end of device [ 230.532197] loop5: rw=2049, want=80, limit=63 [ 230.532231] attempt to access beyond end of device [ 230.532238] loop5: rw=2049, want=81, limit=63 [ 230.532328] attempt to access beyond end of device [ 230.532335] loop5: rw=2049, want=114, limit=63 [ 230.532803] attempt to access beyond end of device [ 230.532812] loop5: rw=2049, want=78, limit=63 [ 230.532852] attempt to access beyond end of device [ 230.532858] loop5: rw=2049, want=79, limit=63 [ 230.532895] attempt to access beyond end of device [ 230.532902] loop5: rw=2049, want=80, limit=63 [ 230.532939] attempt to access beyond end of device [ 230.532945] loop5: rw=2049, want=81, limit=63 [ 230.780310] attempt to access beyond end of device [ 230.780321] loop5: rw=2049, want=78, limit=63 [ 230.780358] attempt to access beyond end of device [ 230.780374] loop5: rw=2049, want=79, limit=63 [ 230.780406] attempt to access beyond end of device [ 230.780413] loop5: rw=2049, want=80, limit=63 [ 230.780445] attempt to access beyond end of device [ 230.780451] loop5: rw=2049, want=81, limit=63 [ 230.780512] attempt to access beyond end of device [ 230.780518] loop5: rw=2049, want=114, limit=63 [ 230.781877] attempt to access beyond end of device [ 230.781887] loop5: rw=2049, want=78, limit=63 [ 230.781928] attempt to access beyond end of device [ 230.781934] loop5: rw=2049, want=79, limit=63 [ 230.781977] attempt to access beyond end of device [ 230.781983] loop5: rw=2049, want=80, limit=63 [ 230.782020] attempt to access beyond end of device [ 230.782027] loop5: rw=2049, want=81, limit=63 07:14:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0xfffffffffffffffe, 0x6, @link_local}, 0x2f) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000240)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x78}}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000280)={'gretap0\x00', {0x2, 0x0, @remote}}) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 07:14:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000600)}, 0x20) 07:14:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10b3) sendfile(r1, r1, 0x0, 0x8080fffffffe) 07:14:31 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 07:14:31 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000600)}, 0x20) [ 231.448318] attempt to access beyond end of device [ 231.456552] audit: type=1400 audit(1583306071.652:45): avc: denied { map } for pid=8129 comm="syz-executor.1" path=2F6D656D66643A2327256E6F646576202864656C6574656429 dev="tmpfs" ino=30419 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 231.473140] loop5: rw=2049, want=78, limit=63 [ 231.503947] attempt to access beyond end of device [ 231.539169] loop5: rw=2049, want=79, limit=63 [ 231.579253] attempt to access beyond end of device [ 231.607208] loop5: rw=2049, want=80, limit=63 [ 231.636638] attempt to access beyond end of device [ 231.651740] loop5: rw=2049, want=81, limit=63 [ 231.666293] attempt to access beyond end of device [ 231.672046] loop5: rw=2049, want=130, limit=63 [ 231.677220] attempt to access beyond end of device [ 231.686721] loop5: rw=2049, want=78, limit=63 [ 231.691835] attempt to access beyond end of device [ 231.696969] loop5: rw=2049, want=79, limit=63 [ 231.709872] attempt to access beyond end of device [ 231.715367] loop5: rw=2049, want=80, limit=63 [ 231.724185] attempt to access beyond end of device [ 231.729271] loop5: rw=2049, want=81, limit=63 [ 231.734617] attempt to access beyond end of device [ 231.742792] loop5: rw=2049, want=130, limit=63 07:14:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0xc201) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000140)={'ipvlan1\x00', {0x2, 0x4e23, @multicast1}}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 07:14:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @any, 0x4}, 0xa) 07:14:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000600)}, 0x20) 07:14:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) [ 232.028972] attempt to access beyond end of device [ 232.054075] loop5: rw=2049, want=78, limit=63 [ 232.106448] attempt to access beyond end of device [ 232.129850] loop5: rw=2049, want=79, limit=63 [ 232.138403] attempt to access beyond end of device [ 232.157126] loop5: rw=2049, want=80, limit=63 [ 232.168998] attempt to access beyond end of device [ 232.185184] loop5: rw=2049, want=81, limit=63 [ 232.194479] attempt to access beyond end of device [ 232.206895] loop5: rw=2049, want=114, limit=63 [ 232.218115] attempt to access beyond end of device [ 232.223560] loop5: rw=2049, want=78, limit=63 [ 232.232763] attempt to access beyond end of device [ 232.243525] loop5: rw=2049, want=79, limit=63 [ 232.249020] attempt to access beyond end of device [ 232.258245] loop5: rw=2049, want=80, limit=63 [ 232.263439] attempt to access beyond end of device [ 232.271701] loop5: rw=2049, want=81, limit=63 07:14:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, 0x0, 0x0) 07:14:32 executing program 4: setitimer(0x2, &(0x7f00000001c0)={{0x80000001, 0x1}, {0x3f00000000, 0xffffffff}}, &(0x7f0000000200)) mknod(&(0x7f0000000080)='./bus\x00', 0x2000008000, 0x86128) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000100)=0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000000240)='./bus\x00', r1, &(0x7f0000000300)='./bus\x00') accept$unix(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="0004001c000080000000005fe60340014502208887d380056e000004"], 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x6, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1) write(r2, &(0x7f0000000140)="220ece228901004cb487abb18b26a6c0df5ab8c1131f4511", 0x18) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff07}], 0x100000000000005e, 0x0) 07:14:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000600)}, 0x20) [ 232.296418] attempt to access beyond end of device [ 232.381506] loop5: rw=2049, want=114, limit=63 07:14:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:32 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, 0x0, 0x0) 07:14:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20) 07:14:32 executing program 4: r0 = socket(0x18, 0x400000002, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x29, 0x32, &(0x7f0000000140)="9513f3948292ae269282d455abab56626afd70c6e9b3fda3181149ee114dd200a92ef2b465bbc11fcfdb71b72ce278fa941a79b7d45722a806d166b1bc4513bb05a76025938759964a53c6bb7cf2394a7ab24012dc56fa2aa2786a7b4b39b7a51bf1baa51d3fb561c0ce637ef3c53f88edcc758d1e1eff1031571ebb9a54c1ea8426de968ad829470aa55d5b3eb81a62a35e0b41bc906838a88d756b2d17d0d7", 0xa0) sendmsg$unix(r0, &(0x7f0000003280)={&(0x7f0000002940)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000003100)=[@rights], 0x10}, 0x0) [ 232.664862] attempt to access beyond end of device [ 232.698017] loop5: rw=2049, want=78, limit=63 [ 232.706955] attempt to access beyond end of device [ 232.713428] loop5: rw=2049, want=79, limit=63 [ 232.718215] attempt to access beyond end of device [ 232.724892] loop5: rw=2049, want=80, limit=63 [ 232.729580] attempt to access beyond end of device [ 232.734953] loop5: rw=2049, want=81, limit=63 [ 232.741093] attempt to access beyond end of device [ 232.746188] loop5: rw=2049, want=114, limit=63 [ 232.751681] attempt to access beyond end of device [ 232.756633] loop5: rw=2049, want=78, limit=63 [ 232.765327] attempt to access beyond end of device [ 232.770860] loop5: rw=2049, want=79, limit=63 [ 232.775417] attempt to access beyond end of device [ 232.784580] loop5: rw=2049, want=80, limit=63 [ 232.789138] attempt to access beyond end of device [ 232.804521] loop5: rw=2049, want=81, limit=63 07:14:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20) 07:14:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, 0x0, 0x0) 07:14:33 executing program 4: r0 = socket(0x18, 0x400000002, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x29, 0x32, &(0x7f0000000140)="9513f3948292ae269282d455abab56626afd70c6e9b3fda3181149ee114dd200a92ef2b465bbc11fcfdb71b72ce278fa941a79b7d45722a806d166b1bc4513bb05a76025938759964a53c6bb7cf2394a7ab24012dc56fa2aa2786a7b4b39b7a51bf1baa51d3fb561c0ce637ef3c53f88edcc758d1e1eff1031571ebb9a54c1ea8426de968ad829470aa55d5b3eb81a62a35e0b41bc906838a88d756b2d17d0d7", 0xa0) sendmsg$unix(r0, &(0x7f0000003280)={&(0x7f0000002940)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000003100)=[@rights], 0x10}, 0x0) 07:14:33 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f00000000c0), 0xa) 07:14:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x83, 0x8, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20) 07:14:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x2f) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000180), 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 232.991951] attempt to access beyond end of device [ 233.005974] loop5: rw=2049, want=78, limit=63 [ 233.033766] attempt to access beyond end of device [ 233.066297] loop5: rw=2049, want=79, limit=63 07:14:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f00000000c0), 0xa) [ 233.196391] buffer_io_error: 47 callbacks suppressed [ 233.196399] Buffer I/O error on dev loop5, logical block 78, lost async page write 07:14:33 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r0) [ 233.264577] attempt to access beyond end of device 07:14:33 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) connect$bt_rfcomm(r1, &(0x7f00000000c0), 0xa) [ 233.288662] loop5: rw=2049, want=80, limit=63 [ 233.297571] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 233.324321] attempt to access beyond end of device [ 233.358637] loop5: rw=2049, want=81, limit=63 [ 233.373593] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 233.412097] attempt to access beyond end of device [ 233.419740] loop5: rw=2049, want=130, limit=63 [ 233.434156] attempt to access beyond end of device [ 233.439225] loop5: rw=2049, want=78, limit=63 [ 233.445132] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 233.453287] attempt to access beyond end of device [ 233.458362] loop5: rw=2049, want=79, limit=63 [ 233.463577] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 233.471485] attempt to access beyond end of device [ 233.476496] loop5: rw=2049, want=80, limit=63 [ 233.483729] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 233.549569] attempt to access beyond end of device [ 233.573594] loop5: rw=2049, want=81, limit=63 [ 233.598793] Buffer I/O error on dev loop5, logical block 80, lost async page write 07:14:34 executing program 2: 07:14:34 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) close(r0) 07:14:34 executing program 0: 07:14:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x2f) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000180), 0x4) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) 07:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:34 executing program 3: 07:14:34 executing program 0: 07:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:34 executing program 2: 07:14:34 executing program 0: 07:14:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000080), 0x4) 07:14:34 executing program 0: r0 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 07:14:34 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) memfd_create(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) msgget$private(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x396, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x800fe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000000)=0xfffffe5d) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) 07:14:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) 07:14:34 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) flock(r0, 0x6) 07:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x26}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 07:14:35 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) 07:14:35 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) getpeername$inet6(r0, 0x0, 0x0) 07:14:35 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 07:14:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:35 executing program 4: syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) memfd_create(0x0, 0x0) creat(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) msgget$private(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x396, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) ftruncate(r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) [ 235.003124] audit: type=1400 audit(1583306075.202:46): avc: denied { create } for pid=8319 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 07:14:35 executing program 2: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) [ 235.083931] audit: type=1400 audit(1583306075.222:47): avc: denied { write } for pid=8319 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 07:14:35 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 07:14:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:35 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) read$midi(r0, 0x0, 0x0) 07:14:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8953, &(0x7f0000000240)=@buf) 07:14:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:36 executing program 4: syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) memfd_create(0x0, 0x0) creat(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) msgget$private(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x396, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) ftruncate(r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) 07:14:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:36 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) memfd_create(0x0, 0x0) creat(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) msgget$private(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x396, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) ftruncate(r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) 07:14:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/sockcreate\x00') read$midi(r0, 0x0, 0xf0ffffff7f0000) 07:14:36 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 07:14:36 executing program 5: r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:36 executing program 2: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) 07:14:36 executing program 4: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) 07:14:36 executing program 0: syz_mount_image$vfat(0x0, 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="3a258211f674a7724bdef64346bc14816593c04768b7b0f781d1d3"], 0x1b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:14:36 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r0, 0x2, 0x0, 0x1000100) 07:14:36 executing program 4: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r0, 0x0) [ 236.256699] audit: type=1804 audit(1583306076.452:48): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir334313410/syzkaller.pL6eNW/26/bus" dev="sda1" ino=16527 res=1 [ 236.328509] audit: type=1804 audit(1583306076.452:49): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir334313410/syzkaller.pL6eNW/26/bus" dev="sda1" ino=16527 res=1 07:14:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:36 executing program 5: r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) readlink(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/116, 0x74}], 0x1, 0xfffffffc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb76ea7211439a321f589f32be513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b143521435cb49840b0f61274420a5d97"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB="14000100fe80000000000027000000000000000014000200fe880000000000000000e05de3de1a38ae4a67c5538861e7d6aca22775a2639b70f2536fa1779fb9caacc33ccbdb932c62b0bc99a7d066617ebf76e3c8bcb3383b021fed2487c35153d0e5e7a06f85c54e24909aa851401de2eafe02c74cd07a6fa277cce690ed7509b9b3216a256e9abfd11f6511b12932de1116f6c545daedf3ec0c93e166fb2961ab2fb919ab7d39aba69b78e353850717034ae9cd"], 0x2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 07:14:36 executing program 4: memfd_create(0x0, 0x0) creat(0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x396, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) 07:14:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8901, &(0x7f0000000240)=@buf) 07:14:36 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read$midi(r0, 0x0, 0x0) 07:14:36 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r0, &(0x7f0000000000)="b6", 0xfffffe7e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 07:14:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)) 07:14:37 executing program 5: r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:37 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read$midi(r0, 0x0, 0x0) 07:14:37 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) pipe2$9p(0x0, 0x0) open(0x0, 0x0, 0x0) pipe(0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14}, 0x14) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 07:14:37 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) [ 237.139725] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:14:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:37 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 07:14:37 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/btrfs-control\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, &(0x7f0000000080), 0x0) 07:14:37 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:37 executing program 0: syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x396, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x141042, 0x0) ftruncate(r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) 07:14:37 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x20) 07:14:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20080080}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x7, 0x100) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000300)='devlink\x00') syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) syz_open_procfs(0x0, 0x0) pipe2(0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb76ea7211439a321f589f32be513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b143521435cb49840b0f61274420a5d97"], 0x48}}, 0x0) 07:14:37 executing program 3: msgctl$MSG_STAT(0x0, 0xb, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = msgget(0x0, 0x248) msgctl$IPC_RMID(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe2(0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:14:37 executing program 5: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:38 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)='9', 0x1}], 0x1) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 07:14:38 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000080)) 07:14:38 executing program 3: msgctl$MSG_STAT(0x0, 0xb, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = msgget(0x0, 0x248) msgctl$IPC_RMID(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe2(0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:14:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:38 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) msgget$private(0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x396, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x800fe) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) 07:14:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20080080}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x7, 0x100) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000300)='devlink\x00') syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) syz_open_procfs(0x0, 0x0) pipe2(0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb76ea7211439a321f589f32be513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b143521435cb49840b0f61274420a5d97"], 0x48}}, 0x0) 07:14:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20080080}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x7, 0x100) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000300)='devlink\x00') syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0) syz_open_procfs(0x0, 0x0) pipe2(0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb76ea7211439a321f589f32be513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b143521435cb49840b0f61274420a5d97"], 0x48}}, 0x0) 07:14:38 executing program 3: syz_open_dev$sg(0x0, 0x0, 0x480001) 07:14:38 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) 07:14:38 executing program 0: r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x51, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000500)='./bus\x00', 0xba) 07:14:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 07:14:38 executing program 4: lseek(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x0) 07:14:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:38 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x100) 07:14:39 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) poll(&(0x7f00000004c0)=[{r0}], 0x1, 0x0) 07:14:39 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) 07:14:39 executing program 3: creat(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) 07:14:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:39 executing program 4: syz_open_dev$vcsa(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 07:14:39 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) 07:14:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000030000100000000000000000000001f774c000100480001000b000100736b626d6f640000340002800a000300aaaaaaaaaabb0000240002000000000000000000000000469d2306000000000000000000000000000000000004000600"], 0x60}}, 0x0) [ 239.249372] audit: type=1804 audit(1583306079.442:50): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir195575312/syzkaller.xUv2rO/60/bus" dev="sda1" ino=16696 res=1 07:14:39 executing program 3: getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000000c0), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) 07:14:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) 07:14:39 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, 0x0) [ 239.373054] audit: type=1804 audit(1583306079.482:51): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir195575312/syzkaller.xUv2rO/60/bus" dev="sda1" ino=16696 res=1 07:14:39 executing program 2: bpf$BPF_TASK_FD_QUERY(0x4, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2}}, 0x20) 07:14:39 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[{0x10, 0x29}], 0x10}}], 0x2, 0x0) [ 239.586619] FAT-fs (loop5): bogus number of reserved sectors [ 239.609291] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:39 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x6}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast}}}}}}, 0x0) [ 239.617941] audit: type=1804 audit(1583306079.492:52): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir195575312/syzkaller.xUv2rO/60/bus" dev="sda1" ino=16696 res=1 07:14:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) [ 239.722962] audit: type=1804 audit(1583306079.492:53): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir195575312/syzkaller.xUv2rO/60/bus" dev="sda1" ino=16696 res=1 [ 239.743834] FAT-fs (loop5): bogus number of reserved sectors [ 239.785290] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(0x0, 0x0) socket(0xa286f325a9499de0, 0x0, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@remote, @mcast1, @loopback, 0x1000000}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) 07:14:40 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0), 0x8) 07:14:40 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000003c0)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) 07:14:40 executing program 3: getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000000c0), 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) 07:14:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:40 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) 07:14:40 executing program 0: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 07:14:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000d06000), 0x4) [ 240.148352] FAT-fs (loop5): bogus number of reserved sectors [ 240.167744] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:40 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) accept4(r0, 0x0, 0x0, 0x0) 07:14:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:40 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) [ 240.480686] FAT-fs (loop5): bogus number of reserved sectors [ 240.486540] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:41 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0xc) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x6f, 0x7) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 07:14:41 executing program 0: r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) 07:14:41 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 07:14:41 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0xc) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) pipe2$9p(0x0, 0xc0000) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) setns(0xffffffffffffffff, 0x0) pipe(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x6f, 0x7) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) fcntl$addseals(r3, 0x409, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x4208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 07:14:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:41 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 240.992314] FAT-fs (loop5): bogus number of reserved sectors [ 241.013025] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:41 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f00000002c0)) [ 241.026800] audit: type=1804 audit(1583306081.222:54): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir195575312/syzkaller.xUv2rO/64/bus" dev="sda1" ino=16724 res=1 [ 241.067415] audit: type=1804 audit(1583306081.262:55): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir334313410/syzkaller.pL6eNW/39/bus" dev="sda1" ino=16721 res=1 07:14:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf) 07:14:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:41 executing program 4: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 07:14:41 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, 0x0) [ 241.364529] audit: type=1804 audit(1583306081.302:56): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir334313410/syzkaller.pL6eNW/39/bus" dev="sda1" ino=16721 res=1 [ 241.394020] FAT-fs (loop5): bogus number of reserved sectors [ 241.417509] FAT-fs (loop5): Can't find a valid FAT filesystem [ 241.475737] audit: type=1804 audit(1583306081.332:57): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir334313410/syzkaller.pL6eNW/39/bus" dev="sda1" ino=16721 res=1 [ 241.540174] audit: type=1804 audit(1583306081.332:58): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir334313410/syzkaller.pL6eNW/39/bus" dev="sda1" ino=16721 res=1 [ 241.566960] audit: type=1804 audit(1583306081.342:59): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir195575312/syzkaller.xUv2rO/64/bus" dev="sda1" ino=16724 res=1 07:14:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:42 executing program 3: io_setup(0x0, &(0x7f00000003c0)) 07:14:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="2800000010002108000000000000000000000000086a7dfecf4831f1898ff4973ec0a280792c26ada3210e5a34c6633ad175655f563ccdf76d942efbb5e4dc6030604343706081bba1fdc23b5e96e7c2899f2a2340c91ead6aed5489f07235f0ad618c00ae99bcd50e1a621d9b4ca1de2eb348fe2d2cd6ac4e6211fb6872ad4b026a6bac51e5a1ad7722dfab0207d181cb56fa6b76675d", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) 07:14:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x26}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 07:14:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:42 executing program 0: memfd_create(0x0, 0x0) creat(0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) msgget$private(0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x396, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10001, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x800fe) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) 07:14:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') read$midi(r0, 0x0, 0x0) [ 241.863646] FAT-fs (loop5): bogus number of reserved sectors [ 241.872488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.897607] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:42 executing program 4: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) 07:14:42 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00') 07:14:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) 07:14:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/sockcreate\x00') read$midi(r0, 0x0, 0x0) [ 242.233620] FAT-fs (loop5): bogus number of reserved sectors [ 242.257676] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) stat(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:42 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, 0x0, 0x0) 07:14:42 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 07:14:42 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0xc) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) pipe2$9p(0x0, 0xc0000) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) pipe(0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) fcntl$addseals(0xffffffffffffffff, 0x409, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x4208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 07:14:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x26}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 07:14:42 executing program 4: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) 07:14:42 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x0, 0x0) accept$unix(r0, 0x0, 0x0) [ 242.728435] FAT-fs (loop5): bogus number of reserved sectors [ 242.776030] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:43 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000c000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) 07:14:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040), 0x4) 07:14:43 executing program 0: r0 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmdt(r0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) [ 243.042380] FAT-fs (loop5): bogus number of reserved sectors [ 243.064688] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:43 executing program 0: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB=',']) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 07:14:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x4801) 07:14:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x40049409, 0x0) 07:14:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:43 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x26}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) 07:14:43 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 07:14:43 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) [ 243.544557] FAT-fs (loop5): bogus number of reserved sectors [ 243.565677] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:43 executing program 0: r0 = semget$private(0x0, 0x0, 0x0) semop(r0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r1, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 07:14:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2}}, 0x20) 07:14:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:44 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) [ 243.907281] FAT-fs (loop5): bogus number of reserved sectors [ 243.932669] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:44 executing program 4: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ftruncate(r0, 0x8200) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) 07:14:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2}}, 0x20) 07:14:44 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x2804c3) 07:14:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "00000100000000000800449420eba71a4976e252922cb18f6e2e2aba000100012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b080000000049740000000000000025ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002e0019030079befa5100fe7000000000", @ANYRES32=r4], 0x2}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 244.311060] NOHZ: local_softirq_pending 08 [ 244.315475] NOHZ: local_softirq_pending 08 07:14:44 executing program 0: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, 0x0, 0x0) 07:14:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 244.377014] FAT-fs (loop5): bogus number of reserved sectors [ 244.394446] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, 0x0) 07:14:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:44 executing program 0: socketpair(0x28, 0x0, 0x1, &(0x7f0000000000)) [ 244.428692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8964 comm=syz-executor.2 [ 244.461314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8964 comm=syz-executor.2 07:14:44 executing program 3: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/222) [ 244.526153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8964 comm=syz-executor.2 [ 244.573375] FAT-fs (loop5): bogus number of reserved sectors [ 244.707360] FAT-fs (loop5): Can't find a valid FAT filesystem [ 244.715014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8964 comm=syz-executor.2 [ 244.745886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8964 comm=syz-executor.2 [ 244.758879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8964 comm=syz-executor.2 [ 244.772882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8964 comm=syz-executor.2 [ 244.785771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8964 comm=syz-executor.2 [ 244.806703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8964 comm=syz-executor.2 [ 244.821988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8964 comm=syz-executor.2 07:14:45 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x20) 07:14:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 07:14:45 executing program 3: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000180)=""/222) 07:14:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) [ 245.246527] FAT-fs (loop5): bogus number of reserved sectors [ 245.283688] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:45 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') 07:14:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 07:14:45 executing program 0: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 07:14:45 executing program 4: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80400) socket$inet_udp(0x2, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0xfffffffffffffe9b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 07:14:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) 07:14:45 executing program 4: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80400) socket$inet_udp(0x2, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0xfffffffffffffe9b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) [ 245.428530] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 245.625653] FAT-fs (loop5): bogus number of reserved sectors [ 245.686018] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:46 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 07:14:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="8d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000000)="97b8f5de98917547b7209e3040e2f64f48a441e7e190f539052a880077fbdab71547169896fed3bf59faab285ac1df55954ee05d0fcfcc37df2d1d6d0a327dbe52474e90b75dddf08a5b5ce965f609363cb99e8b9e12b2f0671a68a23ab6d64fb7a0aa3663eebe63073baeac5c43d2a239efc1403075ec35906f", 0x7a}, {&(0x7f0000000ac0)="5e80c36f136c7c962ab19a752dda6e54053869b6032b091e08ada9126ab8bdacd32b07530be715f077a3cdd86f213a8b0bcdb79baf04e636f7efc169ae6a8a9851dc82d6ea96f753529040b84e198317641e283a557981394ae30107799ae62f2e613b59bcb690a9dbfe8acadd444718151042686b0c060c781102500877433539c6ebc3289618e577a51e24126a8c512c4e40d5caeae1962c4e4f9b", 0x9c}, {&(0x7f0000001340)="4a5ee29babc909e40d9fbc8f433dd22b6874a1798767227fbfd665a8d762c85ec34bc8ad708c87fa90f24dbf8272afcd40f1010257a23e1f51010c91727e597e454a5ce26a4c6b813bed89822978f86e8bd448211290e36f3d61dc3f33daeba4ff2ea7ccffbcdb189a174b6610eec156b834c9463c5e3a8de549f51ea0a318f8845f90", 0x83}], 0x3}}], 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)={0x2dc, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x2b1, 0xe, "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"}]}, 0x2dc}}, 0x0) 07:14:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) 07:14:46 executing program 2: mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7) 07:14:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) [ 246.231609] NOHZ: local_softirq_pending 08 07:14:46 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000003700)={0x0, 0x0, 0x8}, 0x10) 07:14:46 executing program 2: bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) 07:14:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback}, {@in=@remote}, @in=@broadcast}}, 0xf0}}, 0x0) [ 246.319204] FAT-fs (loop5): bogus number of reserved sectors [ 246.346536] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7b, 0x0, 0x0) 07:14:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:46 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x6, 0xffffffffffffffff, 0x5) [ 246.593590] FAT-fs (loop5): bogus number of reserved sectors [ 246.673914] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000001a70f6"]) 07:14:47 executing program 2: msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000047c0)=""/83) 07:14:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="3a258211f674a7724bdef64346bc14816593c04768b7b0f781d1d3abf9d1a51c4b0fe1e77551a8bd676825f508300200000040847bc2fdffe8cd918b03fe412915d8a5c51817c3ff01a1f62a471e85445d8f244f6be479ffffffffff"], 0x5c) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 07:14:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1d, &(0x7f0000000080), 0x4) 07:14:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffc3c, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) 07:14:47 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x7fffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, 0x0, 0x0) [ 247.222636] FAT-fs (loop5): invalid media value (0x00) 07:14:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40) [ 247.249958] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:47 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000b40)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1e8eb5", 0x8, 0x2c, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) 07:14:47 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000000)=0x14e3c41f) [ 247.587143] FAT-fs (loop5): invalid media value (0x00) [ 247.615059] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:48 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000a40)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x5452, &(0x7f0000000a80)) 07:14:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)) 07:14:48 executing program 4: syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) 07:14:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) 07:14:48 executing program 4: creat(&(0x7f00000002c0)='./bus\x00', 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) 07:14:48 executing program 3: get_robust_list(0x0, &(0x7f0000000d80)=0x0, &(0x7f0000000dc0)) 07:14:48 executing program 2: creat(&(0x7f0000000040)='./bus\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='security.evm\x00', 0x0, 0x0, 0x0) [ 248.067452] FAT-fs (loop5): invalid media value (0x00) [ 248.079938] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:48 executing program 4: socketpair(0x22, 0x0, 0xa, &(0x7f00000003c0)) 07:14:48 executing program 3: r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x10e, 0x0, 0x0, 0x4) [ 248.353037] FAT-fs (loop5): invalid media value (0x00) [ 248.376737] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:49 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmdt(0x0) 07:14:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, 0x0) 07:14:49 executing program 4: r0 = socket(0x10, 0x803, 0x0) bind$pptp(r0, 0x0, 0x0) 07:14:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:49 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x5451, 0x0) 07:14:49 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0xc) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) setns(0xffffffffffffffff, 0x0) pipe(0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) fcntl$addseals(r3, 0x409, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x4208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r4, 0x0, 0x0) 07:14:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000200)="8d", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000000)="97b8f5de98917547b7209e3040e2f64f48a441e7e190f539052a880077fbdab71547169896fed3bf59faab285ac1df55954ee05d0fcfcc37df2d1d6d0a327dbe52474e90b75dddf08a5b5ce965f609363cb99e8b9e12b2f0671a68a23ab6d64fb7a0aa3663eebe63073baeac5c43d2a239efc1403075ec35906f", 0x7a}, {&(0x7f0000000ac0)="5e80c36f136c7c962ab19a752dda6e54053869b6032b091e08ada9126ab8bdacd32b07530be715f077a3cdd86f213a8b0bcdb79baf04e636f7efc169ae6a8a9851dc82d6ea96f753529040b84e198317641e283a557981394ae30107799ae62f2e613b59bcb690a9dbfe8acadd444718151042686b0c060c781102500877433539c6ebc3289618e577a51e24126a8c512c4e40d5caeae1962c4e4f9b", 0x9c}, {&(0x7f0000001340)="4a5ee29babc909e40d9fbc8f433dd22b6874a1798767227fbfd665a8d762c85ec34bc8ad708c87fa90f24dbf8272afcd40f1010257a23e1f51010c91727e597e454a5ce26a4c6b813bed89822978f86e8bd448211290e36f3d61dc3f33daeba4ff2ea7ccffbcdb189a174b6610eec156b834c9463c5e3a8de549f51ea0a318f8845f90", 0x83}], 0x3}}], 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001640)={0x2dc, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x2b5, 0xe, "43f3f9fd2bfaaa84c6f656fafebb3d1ca2ddfc9bb93dc947aeca7d749dfea348c5ea3b7ea3a961616411539d7ff91bf927fa2adadadfd9b29965313438a2d74d0d69f354db5af3934e32262e0773e068087424c9b0e2de39ef8e4b8a6865558063c9b0654b65864c2d16d0568d70f4a00f81b65696e3f36dc4b61bb310550f4ee95a4b2d2315f9d023fd960a2475ba6093c08f55a211b9011ee1989b55f14cdd8ff8150eed70d4af68ed364bacc9077b078ae105b65ea8ddde1b8039cc8c5a725c02bef585ad403d37399610316a7ea86800383b229127f9bb5282086f2c3adb503852732245b5dcb9d8522d9ab5db9d71c5d09b3f0fa448eedcae3b9590d396d982397bd020a5d3588d8667bbc154103ff81f4c3ae4d7b5c442f58e7a89202f64893693a7595f511eb2a3129d32d7fe4d57ca4d94ec1e3126cdb0e12d8cc30c06efd6197167068b2a9905407e6afbf0f783a23a08c8df3c005fd864a931d75ccd3a4a1c0f85143b3cc7a1759c45c7ddb38f0bbc6be1a24b0a87b12d79368783673bc929e93594ba9162c8deac704892e657df727806d806086e4fab78af24d0db0bd25dbb8a32825dbc5b5480fbbf6078ba7d60fabaaea7cdb8b6cb7059266898c7c1c9044d5fdc11f0f1bbca2e5e443394ab3af2b1875385d3e53007c1c38a6a4ee4f7a51d984c7b06bf2d7ba5e43ec46fd76d87d93fd768a11f9fd3d4d721b3bd7c0694f1ccf0f7b4c3c89cb36d3a4d68dbb8fd9dc85fc29ac00c7431005e9734dac1fa2f88e6affaf956fbdc7519adc2447fa61ecc50b9562cf1710a61c78db04d954f97774a55c84ead300ec1e959087bd93c8225e538dae2fdcea4c03ee3f081cd35b24ca5335659d61fe64d793ac9d50459d8cdc205ba3c3f74408d8dc8ef0dae65cc43075d5e243027952fae7d9115a409c2e72e20c396018183bd55fbdaabbbcc6b9926382f9d571e58182c44"}]}, 0x2dc}}, 0x0) [ 248.891620] FAT-fs (loop5): invalid media value (0x00) [ 248.925705] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:49 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000a40)='/dev/snd/midiC#D#\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0x5421, &(0x7f0000000a80)) 07:14:49 executing program 2: link(&(0x7f00000000c0)='./bus/file0\x00', 0x0) 07:14:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:49 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'], 0x1) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x803, 0x2) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@local, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x3}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 249.057181] kauditd_printk_skb: 6 callbacks suppressed [ 249.057189] audit: type=1804 audit(1583306089.252:66): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir195575312/syzkaller.xUv2rO/87/bus" dev="sda1" ino=16828 res=1 [ 249.123544] FAT-fs (loop5): invalid media value (0x00) [ 249.129074] FAT-fs (loop5): Can't find a valid FAT filesystem [ 249.159390] audit: type=1804 audit(1583306089.292:67): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir195575312/syzkaller.xUv2rO/87/bus" dev="sda1" ino=16828 res=1 [ 249.362518] audit: type=1804 audit(1583306089.392:68): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir195575312/syzkaller.xUv2rO/87/bus" dev="sda1" ino=16828 res=1 [ 249.391418] audit: type=1804 audit(1583306089.402:69): pid=9237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir195575312/syzkaller.xUv2rO/87/bus" dev="sda1" ino=16828 res=1 07:14:49 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:49 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x1, 0x0) 07:14:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x6, 0x201}, 0x14}}, 0x0) 07:14:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 07:14:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:49 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00'], 0x1) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x803, 0x2) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@local, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x4, 0x0, 0x3}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) creat(&(0x7f00000004c0)='./file1\x00', 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) 07:14:49 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) pipe2$9p(0x0, 0xc0000) open(0x0, 0x0, 0x0) ftruncate(r0, 0x48280) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) pipe2$9p(&(0x7f00000001c0), 0x0) setns(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x6f, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$addseals(r2, 0x409, 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) 07:14:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$inet6(r0, 0x0, 0x0) 07:14:50 executing program 3: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) [ 249.788554] FAT-fs (loop5): invalid media value (0x00) [ 249.806750] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$inet6(r0, 0x0, 0x0) 07:14:50 executing program 3: mount$9p_fd(0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000000ac0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 250.139240] FAT-fs (loop5): invalid media value (0x00) [ 250.174887] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:50 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:50 executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400, 0xe36f}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000404002, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty}}, 0x24) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r3, 0x0, 0x0) shutdown(r3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000240)={0x0, 'batadv0\x00', {0xf}}) shutdown(r2, 0x0) fcntl$setpipe(r2, 0x407, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002480)=@assoc_value, 0x8) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x40001) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f000015b000/0x1000)=nil, 0x1000, 0x200000e, 0x80110, r0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) syz_open_dev$mice(0x0, 0x0, 0x400801) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 07:14:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) tkill(0x0, 0x0) 07:14:50 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @phonet, @isdn, @rc={0x1f, @none}}) 07:14:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 07:14:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8906, 0x0) 07:14:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 250.628325] FAT-fs (loop5): invalid media value (0x00) 07:14:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') sendfile(r0, r1, 0x0, 0x0) 07:14:50 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000280)=""/246) [ 250.667670] FAT-fs (loop5): Can't find a valid FAT filesystem 07:14:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:14:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:14:51 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1800000037000505d25a80648c63940d0324fc6010001040", 0x18}], 0x1}, 0x0) 07:14:51 executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400, 0xe36f}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000404002, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty}}, 0x24) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r3, 0x0, 0x0) shutdown(r3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000240)={0x0, 'batadv0\x00', {0xf}}) shutdown(r2, 0x0) fcntl$setpipe(r2, 0x407, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002480)=@assoc_value, 0x8) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x40001) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f000015b000/0x1000)=nil, 0x1000, 0x200000e, 0x80110, r0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) syz_open_dev$mice(0x0, 0x0, 0x400801) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 07:14:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:51 executing program 0: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400, 0xe36f}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000404002, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty}}, 0x24) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r3, 0x0, 0x0) shutdown(r3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000240)={0x0, 'batadv0\x00', {0xf}}) shutdown(r2, 0x0) fcntl$setpipe(r2, 0x407, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002480)=@assoc_value, 0x8) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x40001) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f000015b000/0x1000)=nil, 0x1000, 0x200000e, 0x80110, r0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) syz_open_dev$mice(0x0, 0x0, 0x400801) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 07:14:51 executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400, 0xe36f}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000404002, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty}}, 0x24) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r3, 0x0, 0x0) shutdown(r3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000240)={0x0, 'batadv0\x00', {0xf}}) shutdown(r2, 0x0) fcntl$setpipe(r2, 0x407, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002480)=@assoc_value, 0x8) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x40001) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f000015b000/0x1000)=nil, 0x1000, 0x200000e, 0x80110, r0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) syz_open_dev$mice(0x0, 0x0, 0x400801) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 07:14:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:51 executing program 3: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400, 0xe36f}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000404002, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty}}, 0x24) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r3, 0x0, 0x0) shutdown(r3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000240)={0x0, 'batadv0\x00', {0xf}}) shutdown(r2, 0x0) fcntl$setpipe(r2, 0x407, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002480)=@assoc_value, 0x8) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x40001) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f000015b000/0x1000)=nil, 0x1000, 0x200000e, 0x80110, r0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) syz_open_dev$mice(0x0, 0x0, 0x400801) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 07:14:52 executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x400, 0xe36f}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000404002, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @empty}}, 0x24) prctl$PR_SET_TIMERSLACK(0x1d, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r3, 0x0, 0x0) shutdown(r3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000240)={0x0, 'batadv0\x00', {0xf}}) shutdown(r2, 0x0) fcntl$setpipe(r2, 0x407, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000002480)=@assoc_value, 0x8) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, 0x0, 0x40001) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f000015b000/0x1000)=nil, 0x1000, 0x200000e, 0x80110, r0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x138) syz_open_dev$mice(0x0, 0x0, 0x400801) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 07:14:52 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32, @ANYBLOB="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"], 0x34}}, 0x0) 07:14:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x401, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000002, 0x4) recvmmsg(r0, &(0x7f00000001c0), 0x40000000000025c, 0xea225aec34b1dd0e, 0x0) [ 252.045898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.091410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:14:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:52 executing program 3: r0 = socket(0x100000000011, 0x2, 0x0) bind(r0, 0x0, 0x0) 07:14:52 executing program 0: socket$inet6(0x10, 0x3, 0x0) 07:14:52 executing program 4: syz_emit_ethernet(0x48, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x12, 0x3a, 0xff, @local={0xfe, 0x80, [0x0, 0x10]}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}]}}}}}}, 0x0) 07:14:52 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) 07:14:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000300)=""/28, 0x1c) 07:14:52 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/btrfs-control\x00', 0x0, 0x0) pipe(&(0x7f0000000340)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, 0x0, 0x0) 07:14:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/sockcreate\x00') fchdir(r0) 07:14:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:52 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x146442) 07:14:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x2df) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x4) sendto(r0, &(0x7f00000002c0)='$', 0x1, 0x0, 0x0, 0x0) close(r0) 07:14:53 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000300)=""/28, 0x1c) 07:14:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10b3) sendfile(r2, r2, 0x0, 0x8080fffffffe) 07:14:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) 07:14:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047ff, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x0) 07:14:53 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000100)) 07:14:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080), 0x4) 07:14:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() open(&(0x7f0000000100)='./file0\x00', 0x119000, 0x0) pipe(&(0x7f0000000200)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r1, 0x100, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x30}}, 0x40040) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x30, r2, 0x100, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}]}, 0x30}}, 0x40040) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000009c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB="200000800900ffdbdf250d000000"], 0x2}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r5, r6, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f00000006c0)=ANY=[@ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYBLOB, @ANYPTR64, @ANYRESOCT=0x0, @ANYBLOB="70ea0d12af935337e1fda6f90cec1f1765d9d1d51f54dce3d347e42e5cd85bd780f2e88016738cd4808e5d9051745e783ad3f4e1a545372d4a2222fd957808df12cb4eee6d63aa8fdf6d31c9eb65c02533c82b508e267b0ceea016fd9ff5009cef9788989beb966e370650ec71"], @ANYRESDEC=0x0]], 0x8) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002300)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000002a80)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14}}], 0x30}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002300)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1408000000000000290000000b000000000000f5a32c150f547d"], 0x1a}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 07:14:53 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) 07:14:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:53 executing program 2: r0 = socket(0x10, 0x800000000080003, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000080)={'macvlan1\x00', @ifru_flags}) 07:14:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x26}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) [ 253.398053] macvlan1: Invalid MTU 0 requested, hw min 68 [ 253.443427] attempt to access beyond end of device [ 253.464972] audit: type=1400 audit(1583306093.662:70): avc: denied { map } for pid=9492 comm="syz-executor.0" path="/root/syzkaller-testdir121110190/syzkaller.RdVpmP/87/file0/bus" dev="loop0" ino=24 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dosfs_t:s0 tclass=file permissive=1 [ 253.478243] loop5: rw=2049, want=78, limit=63 [ 253.533767] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 253.542538] attempt to access beyond end of device [ 253.548771] loop5: rw=2049, want=79, limit=63 [ 253.556819] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 253.575579] attempt to access beyond end of device [ 253.581793] loop5: rw=2049, want=80, limit=63 [ 253.586436] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 253.599052] attempt to access beyond end of device [ 253.605271] loop5: rw=2049, want=81, limit=63 [ 253.609888] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 253.701740] attempt to access beyond end of device [ 253.711086] loop5: rw=2049, want=130, limit=63 [ 253.724369] attempt to access beyond end of device [ 253.729509] loop5: rw=2049, want=78, limit=63 [ 253.736163] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 253.747281] attempt to access beyond end of device [ 253.754233] loop5: rw=2049, want=79, limit=63 [ 253.758924] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 253.771773] attempt to access beyond end of device [ 253.776922] loop5: rw=2049, want=80, limit=63 [ 253.784222] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 253.794379] attempt to access beyond end of device [ 253.799476] loop5: rw=2049, want=81, limit=63 [ 253.806888] Buffer I/O error on dev loop5, logical block 80, lost async page write 07:14:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) 07:14:54 executing program 3: creat(&(0x7f0000000480)='./bus\x00', 0x0) setxattr$security_evm(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@v2={0x3}, 0x9, 0x0) 07:14:54 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x0) 07:14:54 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x0) 07:14:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10b3) sendfile(r3, r3, 0x0, 0x8080fffffffe) 07:14:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) dup(0xffffffffffffffff) 07:14:54 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) [ 254.121615] FAT-fs (loop3): bogus number of reserved sectors [ 254.127651] FAT-fs (loop3): Can't find a valid FAT filesystem [ 254.177248] attempt to access beyond end of device [ 254.184370] loop5: rw=2049, want=78, limit=63 [ 254.189092] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 254.216046] attempt to access beyond end of device [ 254.224129] loop5: rw=2049, want=79, limit=63 [ 254.228852] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 254.243635] attempt to access beyond end of device [ 254.248796] loop5: rw=2049, want=80, limit=63 [ 254.255750] attempt to access beyond end of device [ 254.264046] loop5: rw=2049, want=81, limit=63 [ 254.268873] attempt to access beyond end of device [ 254.287055] loop5: rw=2049, want=114, limit=63 [ 254.309806] attempt to access beyond end of device [ 254.316595] loop5: rw=2049, want=78, limit=63 [ 254.334414] attempt to access beyond end of device [ 254.339635] loop5: rw=2049, want=79, limit=63 [ 254.358027] attempt to access beyond end of device [ 359.460027] INFO: rcu_sched detected stalls on CPUs/tasks: [ 359.465723] (detected by 0, t=10502 jiffies, g=2521, c=2520, q=8) [ 359.472048] All QSes seen, last rcu_sched kthread activity 10498 (4294973243-4294962745), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 359.484085] syz-executor.4 R running task 27440 9504 7349 0x00000000 [ 359.491277] Call Trace: [ 359.493849] [ 359.496094] sched_show_task.cold+0x2e3/0x347 [ 359.500619] rcu_check_callbacks.cold+0xd3f/0xdaa [ 359.505496] update_process_times+0x29/0x60 [ 359.509834] tick_sched_handle+0x7d/0x150 [ 359.513976] tick_sched_timer+0x3e/0x120 [ 359.518033] __hrtimer_run_queues+0x25c/0xbb0 [ 359.522520] ? tick_sched_do_timer+0xe0/0xe0 [ 359.526925] ? hrtimer_start_range_ns+0x1060/0x1060 [ 359.531937] hrtimer_interrupt+0x1e6/0x5e0 [ 359.536222] smp_apic_timer_interrupt+0x117/0x5e0 [ 359.541066] apic_timer_interrupt+0x8f/0xa0 [ 359.545464] [ 359.547750] RIP: 0010:kfree+0xf4/0x260 [ 359.551627] RSP: 0018:ffff88804ad0fa00 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 359.559330] RAX: 0000000000000007 RBX: 0000000000000286 RCX: 1ffff11012aa79cc [ 359.566594] RDX: 0000000000000000 RSI: ffff88809553ce40 RDI: 0000000000000286 [ 359.573854] RBP: ffff88808a3d0200 R08: 0000000000000001 R09: 0000000000000000 [ 359.581146] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88812fe567c0 [ 359.588420] R13: ffffffff81960da4 R14: ffff88809e8b6d00 R15: 0000000000000000 [ 359.595824] ? iter_file_splice_write+0x464/0xa10 [ 359.600675] iter_file_splice_write+0x464/0xa10 [ 359.605346] ? generic_file_splice_read+0x3de/0x5d0 [ 359.610356] ? default_file_splice_read+0x870/0x870 [ 359.615365] ? add_to_pipe+0x350/0x350 [ 359.619306] ? avc_policy_seqno+0x5/0x10 [ 359.623364] ? selinux_file_permission+0x7a/0x440 [ 359.628374] ? rw_verify_area+0xe1/0x2a0 [ 359.632429] ? default_file_splice_read+0x870/0x870 [ 359.637443] direct_splice_actor+0x115/0x160 [ 359.641850] splice_direct_to_actor+0x27e/0x730 [ 359.646634] ? generic_pipe_buf_nosteal+0x10/0x10 [ 359.651485] ? do_splice_to+0x150/0x150 [ 359.655472] ? rw_verify_area+0xe1/0x2a0 [ 359.659535] do_splice_direct+0x164/0x210 [ 359.663680] ? splice_direct_to_actor+0x730/0x730 [ 359.668593] ? rcu_read_lock_sched_held+0x10a/0x130 [ 359.673612] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 359.678376] do_sendfile+0x469/0xaf0 [ 359.682101] ? do_compat_pwritev64+0x140/0x140 [ 359.686818] SyS_sendfile64+0x9b/0x110 [ 359.690714] ? SyS_sendfile+0x130/0x130 [ 359.694691] ? do_syscall_64+0x4c/0x640 [ 359.698661] ? SyS_sendfile+0x130/0x130 [ 359.702634] do_syscall_64+0x1d5/0x640 [ 359.706523] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 359.711709] RIP: 0033:0x45c479 [ 359.714894] RSP: 002b:00007f76b6bdcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 359.722599] RAX: ffffffffffffffda RBX: 00007f76b6bdd6d4 RCX: 000000000045c479 [ 359.729864] RDX: 00000000200001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 359.737302] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 359.744569] R10: 00008080fffffffe R11: 0000000000000246 R12: 00000000ffffffff [ 359.751834] R13: 00000000000008d1 R14: 00000000004cb364 R15: 000000000076bf2c [ 359.760000] rcu_sched kthread starved for 10498 jiffies! g2521 c2520 f0x2 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0 [ 359.770997] rcu_sched R running task 29920 9 2 0x80000000 [ 359.778193] Call Trace: [ 359.780805] ? __schedule+0x7b8/0x1ca0 [ 359.784700] ? __sched_text_start+0x8/0x8 [ 359.788942] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 359.794040] schedule+0x8d/0x1b0 [ 359.797418] schedule_timeout+0x43c/0xe40 [ 359.801608] ? usleep_range+0x130/0x130 [ 359.805618] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 359.810643] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 359.815752] ? call_timer_fn+0x650/0x650 [ 359.819824] rcu_gp_kthread+0xb8e/0x1ce0 [ 359.823906] ? force_qs_rnp+0x4f0/0x4f0 [ 359.827884] ? force_qs_rnp+0x4f0/0x4f0 [ 359.831943] kthread+0x30d/0x420 [ 359.835310] ? kthread_create_on_node+0xd0/0xd0 [ 359.839981] ret_from_fork+0x24/0x30 [ 359.843761] INFO: rcu_preempt detected stalls on CPUs/tasks: [ 359.849735] (detected by 0, t=10537 jiffies, g=3355, c=3354, q=498) [ 359.856238] All QSes seen, last rcu_preempt kthread activity 10537 (4294973281-4294962744), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 359.868484] syz-executor.4 R running task 27440 9504 7349 0x00000000 [ 359.875684] Call Trace: [ 359.878272] [ 359.880508] sched_show_task.cold+0x2e3/0x347 [ 359.885000] rcu_check_callbacks.cold+0xd3f/0xdaa [ 359.889846] update_process_times+0x29/0x60 [ 359.894164] tick_sched_handle+0x7d/0x150 [ 359.898310] tick_sched_timer+0x3e/0x120 [ 359.902384] __hrtimer_run_queues+0x25c/0xbb0 [ 359.906874] ? tick_sched_do_timer+0xe0/0xe0 [ 359.911280] ? hrtimer_start_range_ns+0x1060/0x1060 [ 359.916447] hrtimer_interrupt+0x1e6/0x5e0 [ 359.920694] smp_apic_timer_interrupt+0x117/0x5e0 [ 359.925561] apic_timer_interrupt+0x8f/0xa0 [ 359.929877] [ 359.932141] RIP: 0010:kfree+0xf4/0x260 [ 359.936016] RSP: 0018:ffff88804ad0fa00 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff10 [ 359.943731] RAX: 0000000000000007 RBX: 0000000000000286 RCX: 1ffff11012aa79cc [ 359.951009] RDX: 0000000000000000 RSI: ffff88809553ce40 RDI: 0000000000000286 [ 359.966439] RBP: ffff88808a3d0200 R08: 0000000000000001 R09: 0000000000000000 [ 359.973705] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88812fe567c0 [ 359.980969] R13: ffffffff81960da4 R14: ffff88809e8b6d00 R15: 0000000000000000 [ 359.988418] ? iter_file_splice_write+0x464/0xa10 [ 359.993269] iter_file_splice_write+0x464/0xa10 [ 359.997940] ? generic_file_splice_read+0x3de/0x5d0 [ 360.002950] ? default_file_splice_read+0x870/0x870 [ 360.007959] ? add_to_pipe+0x350/0x350 [ 360.011842] ? avc_policy_seqno+0x5/0x10 [ 360.015900] ? selinux_file_permission+0x7a/0x440 [ 360.020751] ? rw_verify_area+0xe1/0x2a0 [ 360.024945] ? default_file_splice_read+0x870/0x870 [ 360.029965] direct_splice_actor+0x115/0x160 [ 360.034377] splice_direct_to_actor+0x27e/0x730 [ 360.039048] ? generic_pipe_buf_nosteal+0x10/0x10 [ 360.043894] ? do_splice_to+0x150/0x150 [ 360.047880] ? rw_verify_area+0xe1/0x2a0 [ 360.051939] do_splice_direct+0x164/0x210 [ 360.056095] ? splice_direct_to_actor+0x730/0x730 [ 360.060935] ? rcu_read_lock_sched_held+0x10a/0x130 [ 360.065944] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 360.070697] do_sendfile+0x469/0xaf0 [ 360.074411] ? do_compat_pwritev64+0x140/0x140 [ 360.079009] SyS_sendfile64+0x9b/0x110 [ 360.082900] ? SyS_sendfile+0x130/0x130 [ 360.086883] ? do_syscall_64+0x4c/0x640 [ 360.091077] ? SyS_sendfile+0x130/0x130 [ 360.095053] do_syscall_64+0x1d5/0x640 [ 360.098945] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 360.104127] RIP: 0033:0x45c479 [ 360.107317] RSP: 002b:00007f76b6bdcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 360.115030] RAX: ffffffffffffffda RBX: 00007f76b6bdd6d4 RCX: 000000000045c479 [ 360.122392] RDX: 00000000200001c0 RSI: 0000000000000003 RDI: 0000000000000003 [ 360.129657] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 360.136923] R10: 00008080fffffffe R11: 0000000000000246 R12: 00000000ffffffff [ 360.144203] R13: 00000000000008d1 R14: 00000000004cb364 R15: 000000000076bf2c [ 360.151489] rcu_preempt kthread starved for 10537 jiffies! g3355 c3354 f0x2 RCU_GP_WAIT_FQS(3) ->state=0x0 ->cpu=0 [ 360.161964] rcu_preempt R running task 29920 8 2 0x80000000 [ 360.169269] Call Trace: [ 360.171860] ? __schedule+0x7b8/0x1ca0 [ 360.175745] ? __sched_text_start+0x8/0x8 [ 360.179886] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 360.184984] schedule+0x8d/0x1b0 [ 360.188455] schedule_timeout+0x43c/0xe40 [ 360.192606] ? usleep_range+0x130/0x130 [ 360.196837] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 360.201871] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 360.206974] ? call_timer_fn+0x650/0x650 [ 360.211036] rcu_gp_kthread+0xb8e/0x1ce0 [ 360.215126] ? force_qs_rnp+0x4f0/0x4f0 [ 360.219099] ? force_qs_rnp+0x4f0/0x4f0 [ 360.223076] kthread+0x30d/0x420 [ 360.226438] ? kthread_create_on_node+0xd0/0xd0 [ 360.231164] ret_from_fork+0x24/0x30